Everything in one place

• SAML 2.0 applications
• OpenID Connect with PKCE
• One session, many apps

You can: Connect an app once, then people sign in to it without another password.

• Platform passkeys and security keys
• Authenticator-app codes by QR
• Recovery if a device is lost

You can: Register a passkey or scan a QR code with any authenticator app.

• Decisions weigh sign-in risk
• Ask for more only when needed
• Every decision is logged

You can: Planned for the Adapt plan. Not released yet.

• Fresh check for sensitive actions
• Works for admin changes
• Outcome is written to the log

You can: A risky admin change waits until the person proves it is them.

• Tiles for assigned apps
• Opens apps already signed in
• Each person sees their own apps

You can: Open any assigned app from one page, signed in.

• One record per person
• Groups decide who gets which app
• Four admin roles

You can: Add people, put them in groups, and assign apps to the groups.

• Inbound from your HR system
• Outbound to apps that support it
• Leavers lose access at the HR edit

You can: Change a person once in HR and watch access follow in connected apps.

• Build steps without code
• Joiners, movers and leavers
• Each run leaves a record

You can: Planned for the Adapt plan. Not released yet.

• Sign-ins and admin changes
• Filter and search events
• Export to CSV

You can: Hand an auditor a CSV of the events they ask about.

• Signed webhook delivery
• Splunk HEC delivery
• Signature lets you verify events

You can: Send every event to your SIEM and verify its signature.

• Access and erasure requests
• Grievance workflow included
• Records stay in India

You can: Receive a request, work it, and keep the record.

• Owners confirm or remove access
• Decisions are signed
• Evidence ready for audit

You can: Planned for the Govern plan. Not released yet.

• OpenAPI description
• Browser and Android SDKs
• iOS app

You can: Read the API description and call it from your own code.