Mock login (dev). Your role is resolved from the directory, not the token. In production: Azure → Authentik.
Start the guided walkthrough → · How it works