Lab prototype — Quick demo sign-in logs you straight in as any seeded role (to test every page); or use your account from Sign Up. Credentials are verified server-side by identity-service (which logs the sign-in) and now persist in a real database. Federated SSO & MFA step-up arrive with Keycloak (Phase 8).