**Purpose:** Lightweight IAM profile implementation for NetKingdom — "prepare for Keycloak without Keycloak". Implements the NetKingdom IAM Profile (OIDC/PKCE) via Authelia + LLDAP + privacyIDEA, with migration path to Keycloak in expanded mode. **Domain:** infotech **Repo slug:** key-cape **Topic ID:** cee7bedf-2b48-46ef-8601-006474f2ad7a