> ## Documentation Index
> Fetch the complete documentation index at: https://docs.strata.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Welcome to Maverics

Maverics is Strata Identity's orchestration platform for modern, legacy, and AI identity. The **Orchestrator** -- a lightweight identity abstraction layer -- routes authentication and authorization between your applications and any identity provider, while the **Maverics Console** provides a visual interface for managing connectors, policies, and configurations.

[Become an Identity Hero with Maverics](https://www.youtube.com/embed/fXZm8Mje7LY)

### Why Maverics

* **Extend identity to AI** -- Connect enterprise identity to MCP servers and AI-powered applications through the AI Identity Gateway without rebuilding your identity infrastructure from scratch.
* **Vendor independence** -- Work with any identity provider, any protocol. Maverics translates bidirectionally between SAML, OIDC, LDAP, and header-based auth so you're never locked into a single vendor's ecosystem.
* **Identity Continuity** -- Maverics monitors IdP health and automatically fails over to a backup when an outage is detected. Multi-tier resilience options range from basic failover to [tactical edge deployments](/guides/identity-continuity/reducing-spofs) that operate autonomously when cloud connectivity is severed.
* **Modernize apps without code changes** -- Add SSO, MFA, and authorization policies to applications that don't natively support them. Maverics acts as an identity-aware reverse proxy so applications need zero modification.
* **Data stays in your environment** -- Maverics is self-hosted inside your infrastructure. Authentication traffic -- tokens, credentials, user attributes -- never leaves your environment. Only configuration flows through the cloud.
* **Zero-downtime migration** -- Migrate between identity providers incrementally. Maverics routes authentication between old and new providers simultaneously so you can move users at your own pace with no rip-and-replace.
* **Programmable at every layer** -- [Service extensions](/reference/orchestrator/service-extensions) give you 30+ hook points across the authentication and authorization lifecycle with an embedded Go runtime. Customize request handling, build custom API endpoints, or integrate with any external system.

## What You Can Do

Maverics handles the identity complexity so you can focus on your applications.

> **Migrate Identity Providers**
>
> Move users from one identity provider to another incrementally, with zero downtime and no application changes.

> **Add SSO to Legacy Apps**
>
> Add SAML or OIDC single sign-on to legacy applications that only support header-based or forms-based authentication, without modifying application code.

> **Protect APIs**
>
> Enforce fine-grained authorization policies on API endpoints using OAuth 2.0 token validation, claim-based routing, and policy evaluation.

> **Secure AI Applications**
>
> Extend enterprise identity and authorization to MCP servers and AI-powered applications through the AI Identity Gateway.

> **Consolidate Multi-Cloud Identity**
>
> Unify identity across AWS, Azure, GCP, and on-premises environments through a single orchestration layer.

## Who Is Maverics For

> **IAM Administrators**
>
> Tired of risky, all-or-nothing identity migrations? Use Maverics to migrate users between identity providers incrementally, configure SSO federation across protocols, and manage authentication policies -- all without custom code or application changes.

> **Platform Engineers**
>
> Struggling with identity sprawl across environments? Deploy the Orchestrator as a lightweight identity abstraction layer, manage configuration with YAML and GitOps, and integrate with your existing secrets and caching infrastructure.

> **Developers**
>
> Need identity in your applications without becoming an IAM expert? Maverics simplifies application design with an extensible identity layer, built-in AI identity support, and standard protocol handling -- so you can focus on features, not auth plumbing.

## Security & Compliance

> **[Self-Hosted Architecture](/guides/security/overview)**
>
> Deploy in your own infrastructure with full control over secrets, certificates, and network policies. Nothing leaves your environment unless you choose it.

> **[Tamper-Proof Configuration](/reference/console/config-publishing)**
>
> Configuration bundles are cryptographically signed and verified before every deployment, ensuring only authorized changes reach your Orchestrators.

> **[Complete Audit Trail](/guides/security/compliance)**
>
> Every authentication event, configuration change, and administrative action is logged for compliance reporting and forensic analysis.

> **[Trust Center](https://trust.strata.io)**
>
> Certifications, security practices, penetration testing results, and compliance documentation.

## Explore the Docs

The documentation is organized by what you're trying to accomplish.

> **[Getting Started](/introduction/getting-started)**
>
> Deploy your first Orchestrator and route an authentication request in minutes.

> **[Architecture](/introduction/architecture)**
>
> Understand how the Orchestrator, Console, and identity providers fit together.

> **[Guides](/guides/getting-started/overview)**
>
> Step-by-step walkthroughs for authentication, AI identity, operations, and security.

> **[Orchestrator Reference](/reference/orchestrator/overview)**
>
> Operating modes, configuration, route handling, and runtime behavior.

> **[Identity Fabric](/reference/orchestrator/identity-fabric)**
>
> Identity providers, config sources, secret providers, caches, and sessions.

> **[Configuration](/reference/orchestrator/configuration)**
>
> Complete configuration reference for apps, connectors, policies, and service extensions.

> **[Videos](/introduction/videos)**
>
> Watch video walkthroughs covering setup, configuration, and common workflows.