Skip to main content

Security

How Openlane authenticates users and services, isolates tenants, and enforces authorization, from the implementation side.

Topics​

  • Authentication flow behavior
  • API and personal token patterns
  • Privacy rules, fine-grained authorization (FGA), and module gating (the tenancy model itself is covered in Organizations)
  • Field-level encryption

Suggested Order​

  1. Auth Flows
  2. SSO & Auth Configuration
  3. API Tokens and PATs
  4. Privacy and Authorization