**This is an old revision of the document!**
keycloak
- account management: https://keycloak.canidae.systems/auth/realms/canine/account/
totp
accounts must have an active totp authenticator before Keycloak will grant IdP use. this is waived if the account is connected to Google (but the account password will be subsequently disabled).