assignment assignment cache cache catalog catalog cors CORS credential credential domain domain federation federation fernet_tokens Fernet tokens identity identity kvs KVS mapping mapping memcache memcache oauth OAuth os_inherit os_inherit revoke revoke role role saml SAML security security token token tokenless Tokenless Authorization trust trust