From Bright Pattern Documentation
<translate>
Design
The Identity Provider API works with the Identity Provider component, which is designed to do the following:
- Maintain active user sessions
- Authenticate new logins and creates new sessions
- Determine privileges to run a particular application type (but does not determine privileges within the application)
- Perform checks and enforces limits on attempted login rate, account lockouts, IP address ranges, and concurrent user logins per tenant
For more information on this component, see the Deployment Guide, section Server-Side Components.
HTTP
The API is provided via HTTP to simplify integration from web servers and app servers.
</translate>