Web Frolic is in early access. We're working with teams one at a time.
Access change, as recorded
identity
svc-billing-sync
type
service account
granted
billing-readers
expires
30 Nov, then removed
requested via
workflow WF-1093
approved by
j.okafor
usable from
203.0.113.0/24 only
An illustration of what we keep for each access change: where it came from, who approved it, when it ends, and where it can be used from. Names and values are made up.
Five parts, one identity model
Customer and workforce identity share the same model. The other three parts are built on it, so there's no second product to wire up.
Customer identity
Sign-in and profiles for the people who use your product.
Standards-based login with OAuth 2.1 and OpenID Connect.
Define your own user types, each with its own profile fields. A real estate app might have brokers, realtors, and buyers.
Built for multiple tenants from the start.
Enterprise identity
Single sign-on and access control for your workforce.
Employees and customers live in one model, so there's nothing to reconcile between two products.
Roles, groups, and memberships in one place.
Limit where a user, tenant, token, or API key can be used from, by network address.
User lifecycle
Manage people, service accounts, and agents the same way.
Create, change, and remove access across the life of an account.
Test users get a lifecycle too, so you can roll out with confidence.
Roles, memberships, and permissions can carry an end date and expire on their own.
Access request and review workflows
Let people ask for access, and keep the proof.
An employee service desk portal where staff browse and request groups, applications, and secrets you've marked as discoverable.
Make a group self-service, or require approval.
Every membership change records the request it came from and the workflow that handled it.
Review who has access and remove what's no longer needed.
Customer support desk
Help for your users, built into the platform.
Track identity-related requests as tickets.
Automate routine actions and keep a record of what was done.
Tell us what you're replacing
We're opening early access to a small group of teams. Write to us about what you use today for employee sign-in, customer sign-in, or access approvals, and we'll tell you whether we're a fit.