Provider-neutral identity and access management: users, roles, groups, API credentials, and permission resolution. Pure Java, no framework dependencies.