# dfe-engine

> Every page in the dfe-engine section.

- [DFE architecture](/v/2.2.1/dfe-engine/architecture.md)
- [Data evolution](/v/2.2.1/dfe-engine/data-evolution.md)
- [The DFE Control-Plane Layer](/v/2.2.1/dfe-engine/control-plane.md)
  - [OIDC + RBAC architecture and design](/v/2.2.1/dfe-engine/control-plane/oidc-rbac-architecture.md)
  - [RBAC - the engine's own reads](/v/2.2.1/dfe-engine/control-plane/rbac-engine-reads.md)
  - [RBAC - IdP group sync and links](/v/2.2.1/dfe-engine/control-plane/rbac-groups.md)
  - [RBAC - identity resolution and first login](/v/2.2.1/dfe-engine/control-plane/rbac-sign-in.md)
  - [RBAC vocabulary - roles, groups and terms](/v/2.2.1/dfe-engine/control-plane/rbac-vocabulary.md)
  - [RBAC, Multi-Tenant ClickHouse, and Auth Architecture](/v/2.2.1/dfe-engine/control-plane/rbac.md)
  - [Synthetic Data](/v/2.2.1/dfe-engine/control-plane/synthetic-data.md)
  - [Identity provider setup](/v/2.2.1/dfe-engine/control-plane/idp-setup.md)
    - [Microsoft Entra ID sign-in for DFE](/v/2.2.1/dfe-engine/control-plane/idp-setup/entra.md)
    - [Google Workspace sign-in for DFE](/v/2.2.1/dfe-engine/control-plane/idp-setup/google.md)
    - [Okta sign-in for DFE](/v/2.2.1/dfe-engine/control-plane/idp-setup/okta.md)
- [Data plane](/v/2.2.1/dfe-engine/data-plane.md)
  - [DFE Expression Language — CEL](/v/2.2.1/dfe-engine/data-plane/expressions-cel.md)
  - [Field mapping layer](/v/2.2.1/dfe-engine/data-plane/field-mapping.md)
  - [Hunt-runner scaling: deterministic-due, no engine dependency](/v/2.2.1/dfe-engine/data-plane/hunt-runner-scaling.md)
  - [Hunt schedule smoothing - flattening CH load by phase drift](/v/2.2.1/dfe-engine/data-plane/hunt-schedule-smoothing.md)
  - [DFE Query API - Python SDK](/v/2.2.1/dfe-engine/data-plane/query-api-python.md)
  - [DFE Query API - Rust SDK](/v/2.2.1/dfe-engine/data-plane/query-api-rust.md)
  - [DFE Query API - TypeScript SDK](/v/2.2.1/dfe-engine/data-plane/query-api-typescript.md)
  - [DFE Query API](/v/2.2.1/dfe-engine/data-plane/query-api.md)
  - [Schema bootstrap -- the engine is the only controller](/v/2.2.1/dfe-engine/data-plane/schema-bootstrap.md)
  - [Schema Type System v2](/v/2.2.1/dfe-engine/data-plane/schema.md)
  - [Sigma detection pipeline](/v/2.2.1/dfe-engine/data-plane/sigma.md)
  - [The source definition](/v/2.2.1/dfe-engine/data-plane/source-definition.md)
  - [Detections on a source](/v/2.2.1/dfe-engine/data-plane/source-detections.md)
  - [The source flow - one definition, two transports](/v/2.2.1/dfe-engine/data-plane/source-flow.md)
  - [Storing and operating a source](/v/2.2.1/dfe-engine/data-plane/source-registry.md)
  - [What a source compiles into](/v/2.2.1/dfe-engine/data-plane/source-routing.md)
  - [Source - the top-level data abstraction](/v/2.2.1/dfe-engine/data-plane/source.md)
  - [The topic contract](/v/2.2.1/dfe-engine/data-plane/topic-contract.md)
- [Deployment seam](/v/2.2.1/dfe-engine/deployment.md)
  - [DFE Backing Services - swap every backend at a seam](/v/2.2.1/dfe-engine/deployment/backing-services.md)
  - [KEDA scaling patterns](/v/2.2.1/dfe-engine/deployment/keda-scaling.md)
  - [DFE Observability Standard](/v/2.2.1/dfe-engine/deployment/observability-standard.md)
  - [Transports and profiles](/v/2.2.1/dfe-engine/deployment/transports.md)