# Centralized Authentication

Record: `arch:centralized-authentication`
Kind: pattern
Layer: [Execution Core](https://banes-lab.com/records/layer/execution-core.md)
Severity: recommended
Scope: identity, system
Canonical: https://banes-lab.com/ontology#arch-centralized-authentication

## Repair

- Refactored by: Introduce IdP, Federate Auth
- Detected by: duplicated credential stores
- Violated by: custom auth per service without federation
- Measured by: auth centralization coverage
- Enforced by: [security policy](https://banes-lab.com/records/algo/security-policy.md)

## requires

- [Identity Provider](https://banes-lab.com/records/lex/identity-provider.md)

## reinforces

- [Security](https://banes-lab.com/records/lex/security.md)
- [Governance](https://banes-lab.com/records/arch/governance.md)

## enables

- [Unified Identity](https://banes-lab.com/records/lex/unified-identity.md)

## conflicts-with

- [Scattered Auth Implementations](https://banes-lab.com/records/lex/scattered-auth-implementations.md)

## tensions-with

- [Identity Provider Availability](https://banes-lab.com/records/lex/identity-provider-availability.md)

## tensions

- [Centralized Authentication Identity Provider Availability](https://banes-lab.com/records/tension/centralized-authentication-identity-provider-availability.md)