> ## Documentation Index
> Fetch the complete documentation index at: https://docs.strata.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

Orchestration is the core of the Maverics platform -- the layer that connects your applications to your [identity fabric](/reference/orchestrator/identity-fabric), translates between protocols, enforces access policies, and routes authentication traffic. Rather than modifying each application to work with each identity provider, orchestration handles all of that centrally.

The **Maverics Orchestrator** is the runtime that provides this. It's a lightweight, self-hosted binary deployed in your infrastructure that processes every identity transaction -- evaluating policies, transforming tokens, and routing requests across protocols without requiring changes to your existing applications.

## Key Capabilities

* **Protocol translation** -- Convert between OIDC, SAML, LDAP, and HTTP-based authentication without modifying applications
* **Identity fabric integration** -- Connect to your organization's [identity fabric](/reference/orchestrator/identity-fabric) -- Entra ID, Okta, Active Directory, LDAP directories, and others -- through a uniform connector interface
* **Identity routing** -- Direct authentication requests to the appropriate identity provider based on configurable policies, with automatic failover between providers
* **Session management** -- Maintain user sessions across multiple applications with configurable [storage backends](/reference/orchestrator/sessions)
* **Credential injection** -- Supply legacy applications with the credentials they expect while using modern identity providers
* **AI identity governance** -- Secure AI agent and MCP tool access through identity-aware policies and the [AI Identity Gateway](/reference/modes/ai-identity-gateway) mode

## Modes

The Orchestrator's mode determines which identity protocol it speaks to your applications. A single Orchestrator can run multiple modes simultaneously:

* [**AI Identity Gateway**](/reference/modes/ai-identity-gateway) -- Secures AI agent access with identity-aware MCP bridge and proxy capabilities
* [**OIDC Provider**](/reference/modes/oidc-provider) -- Acts as an OpenID Connect provider for modern web applications
* [**SAML Provider**](/reference/modes/saml-provider) -- Acts as a SAML identity provider for enterprise applications
* [**HTTP Proxy**](/reference/modes/http-proxy) -- Intercepts and modifies HTTP traffic for legacy application integration
* [**LDAP Provider**](/reference/modes/ldap-provider) -- Serves LDAP queries backed by modern identity sources

## Deployment Options

The Orchestrator supports multiple deployment models to fit your infrastructure:

* **Standalone binary** -- Run directly on Linux, macOS, or Windows as a single process
* **Docker container** -- Deploy as a containerized service with standard Docker tooling
* **Kubernetes** -- Run as a Kubernetes deployment with Helm charts
* **High availability** -- Deploy multiple instances behind a load balancer with sticky sessions for shared user state across nodes

See the [Installation reference](/reference/orchestrator/installation) for setup instructions across all deployment models.

## Related Pages

> **[Installation](/reference/orchestrator/installation)**
>
> System requirements, installation methods, and initial verification

> **[Configuration](/reference/orchestrator/configuration)**
>
> Delivery paths (Console bundles and YAML), secret providers, and runtime settings

> **[Identity Fabric](/reference/orchestrator/identity-fabric)**
>
> Connectors for the identity providers and directories your organization uses

> **[Architecture](/introduction/architecture)**
>
> Platform architecture and how the Orchestrator fits in