How does Diagrid Catalyst ensure Dapr workload identity consistency across hybrid cloud and on-premises clusters?

Catalyst provides a centralized workload identity service that maps application identities to Dapr sidecars across environments. You define identities once in the Catalyst console, and they are enforced via Dapr’s mTLS and token-based authentication regardless of whether the workload runs in cloud or on-premises. This eliminates manual identity configuration per cluster. Catalyst also supports integration with external identity providers (e.g., Azure AD, AWS IAM) for federated identity, ensuring consistent authorization policies across your hybrid deployment.