> ## Documentation Index
> Fetch the complete documentation index at: https://docs.integratewise.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# OneAuth Identity & Connection Architecture

> Centralized credential management, token refresh, and tenant authorization.

# OneAuth: Identity & Connection Management

## Overview

OneAuth provides unified authentication for all connected services in IntegrateWise. Users authenticate once with each upstream provider (Salesforce, Zendesk, Slack, Jira, GitHub), and OneAuth manages:

* **Token Lifecycle**: Automatic refresh of OAuth 2.0 access and refresh tokens.
* **Tenant Isolation**: Secure, per-tenant encrypted credential storage using Cloudflare Secrets and AES-256-GCM.
* **Scope Negotiation**: Fine-grained capability scoping ensuring external services can only read or write within authorized bounds.
* **Audit Trails**: Every credential access and delegation event is logged to immutable receipts.