Overview and definitions

HES LoanBox does not manage user credentials, sign-in screens, or password policies on its own. All authentication and identity management is delegated to Keycloak — an external identity and access management product. This document explains how HES LoanBox and Keycloak work together, how a user gets access to HES LoanBox, which roles the platform recognizes, and how an administrator assigns a role to a user.