Sign in
Authentication is handled by the Envoy + OPA sidecar. Continue to be redirected through the identity provider.
The teller workstation does not collect credentials directly — your session is established upstream and the sidecar forwards X-User-Id and X-User-Roles on every request.