Sign in

The Sign in page redirects you to your organization's OIDC identity provider. In the local reference setup this is Keycloak. The page starts the login flow automatically and also shows a Sign in with Keycloak button.

• Users with the ADMIN role reach every page and every action.
• Users with only the USER role get a read-only view of three pages: the Risk Dashboard, the Findings list and finding detail, and the Suppressions history. They cannot review or classify a finding, cannot create or remove a suppression, and cannot start, pause, resume, or cancel a scan.

Everything else is ADMIN-only: Scans, Rule Catalog, Create Custom Rule, Audit Log, Jira Connection, License, Scan Configuration, Ruleset Transfer, and Reporting. The navigation hides what a USER cannot reach, so a USER never sees a link to a page that would refuse them.

After signing in you are returned to the page you originally asked for, rather than dropped on a default landing page.

If sign-in fails, verify the identity provider configuration. See Identity Provider and Troubleshooting.