assignment assignment catalog catalog compliance Security compliance credential credential domain domain federation federation fernet_tokens Fernet tokens identity identity kvs KVS mapping mapping memcache memcache oauth OAuth os_inherit os_inherit revoke revoke role role saml SAML security security token token tokenless Tokenless Authorization trust trust