Integrations Overview

Integrations come in three shapes:

Shape	Auth	Channel	Examples
Service account	OAuth2 client_credentials	REST + Webhooks	Reporting pipeline ? analytics-service
Tenant SSO	OIDC / SAML	Browser redirect	Customer org ? identity-service
Partner API	API key + scope	REST	LMS rollout to a third-party catalog

All three respect tenant isolation. No integration ever bypasses RLS. See Security & Tenancy.