OIDC auth flow, Kratos + Hydra, client registry (12 apps), session management, identity schemas, self-service flows, Vault integration.