Application suite
Each tile links to a real web application or an honest reason it is not in this demo. Shared public state is read-only for visitors unless a path is labeled playground.
Most applications require sign-in. Anonymous visitors can open the HELIOS signed report viewer and public read-only pages (service directory, DRS metadata, Beacon form, demo status).
sign-in required
Admin UIAdmin UI signs in directly against the broker (fragment Passport → admin session). DAC writes stay on the private network (admin-ui→ADS), not through the public Caddy write path.
anonymous OK
DUO serviceanonymous OK
Sample resourceanonymous OK
Service directoryanonymous OK
DRS browserSite apps use the site-api BFF session (HttpOnly cookie; Passport stays server-side).
anonymous OK
Beacon formsign-in required
Clinical console (Solum)Site apps use the site-api BFF session (HttpOnly cookie; Passport stays server-side).
anonymous OK
HELIOS reportsign-in required
HELIOS dashboardSite apps use the site-api BFF session (HttpOnly cookie; Passport stays server-side).
sign-in required
Audit explorerSite apps use the site-api BFF session (HttpOnly cookie; Passport stays server-side).
sign-in required
Ferrum UIFerrum UI signs in through the ga4gh-infra broker (fragment Passport). Exact redirect URI: https://ui.demo.synapticfour.tech/auth/callback.
not in this demo
BioResearch AssistantBRA waits (owner: Stage 3 / BRA deferred).