Authentication
Provider-managed login
End-user authentication happens on `sso.gov.mn`. This host only prepares the request, receives the callback, and continues the backend service flow.
Ticket.mn
Secure government SSO gateway for Ticket.mn services
This endpoint is the public entrypoint for our `sso.gov.mn` integration. The service is configured on a VPN-connected host and handles the provider callback flow securely on behalf of Ticket.mn applications.
Network path
Connected to XYP
The backend runs on a host with active XYP VPN connectivity so protected downstream service calls can complete after successful authorization.
Internal tools
Debug builder available
The service catalog builder, scope preview, and preset launch tools are intentionally separated onto the `/debug` path.