# Identity Storage Engine

The platform manages authentication accounts using highly customized schema parameters injected over standard ASP.NET Core Identity engine providers. **Asterisk 2** overrides default table naming models and appends extended corporate tracing attributes.

---

## Customized Identity Table Architecture

The layout below maps out the customized relational storage framework managing platform user sessions:

```mermaid
graph LR
    %% Primary Tables
    subgraph UsersTier["Core Users Database"]
        TabUsers[("AspNetUsers Table<br/>(Extended properties: OrgId, FullName)")]
    end

    %% Role Structure
    subgraph RolesTier["RBAC Execution Mapping"]
        TabRoles[("AspNetRoles Table<br/>(Roles: Admin, Customer)")]
        TabUserRoles[("AspNetUserRoles Table<br/>(Composite Mapping Key)")]
    end

    %% Claims Vectors
    subgraph ClaimsTier["Dynamic Verification Ledgers"]
        TabClaims[("AspNetUserClaims Table<br/>(Persisted Access Rights)")]
    end

    %% Relations
    TabUsers <==>|"Foreign Key Linking"| TabUserRoles
    TabRoles <==>|"Foreign Key Linking"| TabUserRoles
    TabUsers ==>|"One-to-Many Maps"| TabClaims

    %% Ultra-Premium Styling Tokens
    classDef userToken fill:#0f172a,stroke:#38bdf8,stroke-width:2px,color:#fff,rx:6px,ry:6px;
    classDef roleToken fill:#312e81,stroke:#ec4899,stroke-width:2px,color:#fff,rx:6px,ry:6px;
    classDef claimToken fill:#065f46,stroke:#10b981,stroke-width:2px,color:#fff,rx:6px,ry:6px;

    class UsersTier,TabUsers userToken;
    class RolesTier,TabRoles,TabUserRoles roleToken;
    class ClaimsTier,TabClaims claimToken;
```

---

## Schema Extension Reference

### 1. Extended `ApplicationUser` Class
The standard system user object maps additional columns ensuring close parity with operational requirements:
- **`OrganizationId`**: Relational foreign key binding human users to multi-tenant structures.
- **`IsSeedAdministrator`**: Persistent boolean flag locking root system records against accidental interface deletion.

### 2. High-Performance Token Ledgers
Database identity configurations configure optimized field length constraints on standard login token stores. This limits primary string allocations to maximize index matching performance during high-frequency API authentication verification loops.