Authentication in KAAP Operator is controlled with JWT tokens for cluster access and TLS for communication between applications within the cluster.