Identity end-to-end: LLDAP and Keycloak
How the homelab's two identity services fit together — LLDAP as the user directory, Keycloak as the OIDC/SAML broker — how every app is wired to the one provider, and what a full SSO login looks like from browser to app.