Noves-Inc/canton-data-app: docs/security.md

# Security model ## Identities Use two distinct OIDC clients and keep the provisioning administrator separate from both: | Identity | Purpose | Matching Canton user | |---|---|---| | Public browser client and human account | Interactive sign-in. The browser access token is forwarded to the selected