Kivuz IAM Architecture Overview

Kivuz IAM is built with a modern, scalable architecture designed for high availability and performance.

System Components

Core Services

• Authentication Engine — Handles login flows, MFA, and session management
• Authorization Engine — RBAC evaluation and policy enforcement
• User Store — PostgreSQL-backed user and credential management
• Token Service — JWT issuance, validation, and rotation

Infrastructure

• PostgreSQL — Primary data store
• Redis — Session cache, rate limiting, and token blacklisting
• API Gateway — API gateway for routing and rate limiting

Multi-Tenancy

Kivuz IAM supports full multi-tenancy through Realms.