EVA App v3.1.0 (Aug 7, 2026)

Keycloak-based integrated authentication and SSO: OIDC SSO is applied based on a central authentication server to enable access to EVA App at multiple locations with a single login.
Central user and permission management: User accounts, password policies, account status, and group/role permissions for each branch can be centrally managed.
External system M2M authentication: External systems such as EVA Scope, EVA Mentor, EVA GTS, and SKI can use the EVA App API using Service Account and OAuth 2.0 Client Credentials without user login.

Integrated session management and logout: Controls duplicate logins, immediately invalidates existing sessions when deleting, deactivating, or changing permissions of an account, and allows logouts from one branch to be propagated to all branches.
Central security policy application: Password expiration/reuse restrictions, login failure lockout, long-term inactive user lockout, session expiration, and user/administrator action recording policies are applied centrally.
BFF-based authentication structure: Access Token and Refresh Token are managed by Backend, and only HttpOnly Session Cookie is delivered to Frontend.