Identity Backend Template — Authentication¶
The identity host owns credential verification (where passwords are used), cookie sessions for interactive flows, and integration points for external providers. OAuth2/OIDC token issuance is normally the job of the Authorization Server.