Authenticate against the mainframe identity realm to open account, card, and transaction operations. Access is brokered by Keycloak — no local passwords are stored in CardCore.
First cut — sign-in is a visual placeholder; account/card/transaction data below comes live from cardcore-api.