Custodian

Nobody should need
a copy of the secret.

Apps read what they need with the identity Kubernetes already gave them. People read values only where it has been granted, one scope at a time, and every reveal writes a row naming them.

7 of 9 need no keyappend-only audit

Experience Educate · internal. Access is granted by an administrator; there is no self-serve sign-up.

Custodian

Sign in

Use your Experience Educate account. Custodian does not hold a password of its own.

SSO ONLY

First sign-in creates an account with no access at all. An administrator puts it in an organization — until then there is nothing to show, and that is the design rather than a delay.

Nobody should needa copy of the secret.

Sign in

Nobody should need
a copy of the secret.