SECURE SESSION · HttpOnly BFF cookie · server authorization enforced
Sovereign control plane
StratoID / Control plane

Invite user

Create a directory identity and apply real group-membership operations before committing.

Used for sign-in, LDAP, RADIUS and SSH key binding.
Shared with the user on first sign-in.