pacod-id
pacod-id, one sign-in for every product
How pacod-id signs people in once for every PACOD product, why its tokens carry no roles, and how each product decides access from a feed of role bindings.