COTHON ID
Identity-first access for hospitality operations
Bring operators, partners, and tenant admins into the platform through one branded page, with SSO discipline, registration control, and clear role intent.
Role intent before session issuance
Direct registration through OIDC prompt=create
Keycloak-backed authentication with portal gating
Platform access
One platform entry for operators, tenants, and COTHON oversight.
Use a branded front door for authentication instead of exposing the default Keycloak surface. Role selection stays explicit, auditable, and tenant-aware.
IAM portal
COTHON ID
Role
Property manager
Review employees, teams, sessions, and scoped access changes for one property perimeter.
Role
Tenant security admin
Operate tenant-wide IAM posture, SSO diagnostics, MFA evidence, and privileged access review.
Role
COTHON super admin
Use cross-tenant oversight with explicit audit evidence, intervention controls, and break-glass discipline.
Authentication status
OIDC configuration is incomplete for production. Add the id-portal Keycloak settings before promoting this login flow.
Dev Bypass
⚡ Login as cothon_super_admin