Authentication
If we already know the user may use a tool (SAP, HubSpot, Google, …), we ask HashiCorp Vault
Secrets and tokens
Status: implemented. The map of every credential in the integration stack — what holds it,
Vault
Status: implemented (POC). Architecture and the Django/Vault/JIT control plane.
SSO internals
Setup steps are in Single sign-on.
Google token flow
One connected Google account covers Gmail and Sheets. Both are tools on the google core agent