Coming soon — this article is being prepared. Below are its question, intended outcome, and place in the story.
The question
Which parts of login belong to Kratos, and which remain in the application?
What we will work through
Draw a Kratos login flow and identify responsibility boundaries.
Before you begin
Previously covered: Authentication, authorization, and sessions: separate responsibilities; OAuth participants and delegated access.