ADR-008: Authentication & Identity Strategy¶
Status: Draft
Date: 2026-01-24
Context¶
CostEngine handles sensitive proprietary manufacturer data. We need a robust, scalable identity provider that supports multi-tenancy.
Decision¶
Keycloak (Managed or Self-hosted).
Rationale¶
- Enterprise Standards: Native support for SAML and OIDC.
- Multi-Tenancy: Each manufacturer can have its own "Realm".
- Future-Proof: Easy integration with existing factory LDAP/Active Directory if required by Tier-1 suppliers.