OpenID Connect — an identity layer on top of OAuth 2.0. SADAR's authentication baseline is OIDC Client Credentials carried over mTLS, using standard signed tokens scoped to the operation being performed.