<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Architecture on GENIE.AI</title><link>https://genie-ai-7e342b.opensource.unicc.org/docs/architecture/</link><description>Recent content in Architecture on GENIE.AI</description><generator>Hugo</generator><language>en</language><atom:link href="https://genie-ai-7e342b.opensource.unicc.org/docs/architecture/index.xml" rel="self" type="application/rss+xml"/><item><title>Architecture</title><link>https://genie-ai-7e342b.opensource.unicc.org/docs/architecture/architecture/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://genie-ai-7e342b.opensource.unicc.org/docs/architecture/architecture/</guid><description>&lt;h1 id="architecture-overview"&gt;Architecture Overview&lt;/h1&gt;
&lt;p&gt;High-level architecture of the GENIE.AI platform with Keycloak OIDC integration.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="1-system-context"&gt;1. System Context&lt;/h2&gt;
&lt;pre class="mermaid"&gt;graph TB
 subgraph External Actors
 EU[End User]
 SA[IT Admin]
 FA[Functional Admin]
 end

 subgraph External IdPs
 Google[Google Workspace]
 MSFT[Microsoft Entra ID]
 SAML[SAML IdP]
 end

 subgraph GENIE.AI Platform
 GENIE[GENIE.AI&amp;lt;br/&amp;gt;RAG Platform]
 end

 EU --&amp;gt;|Web Browser| GENIE
 SA --&amp;gt;|Admin Console| GENIE
 FA --&amp;gt;|Admin Console| GENIE

 Google -.-&amp;gt;|OIDC / OAuth2| GENIE
 MSFT -.-&amp;gt;|OIDC / OAuth2| GENIE
 SAML -.-&amp;gt;|SAML 2.0| GENIE&lt;/pre&gt;
&lt;p&gt;GENIE.AI is a sovereign RAG platform for the public sector. It authenticates users via Keycloak, which can broker to external identity providers (Google, Microsoft, SAML). Three actor personas interact with the system:&lt;/p&gt;</description></item></channel></rss>