Launch customer identity
Tenant onboarding, customer sign-in, enterprise SSO and provisioning.
Customer identity →Capability directory
Features
Browse WebFrolic capabilities by identity type, access decision, policy control, lifecycle or operational workflow. Each capability links to a dedicated page with its design intent and practical questions.
Find your starting point
Browse capabilities by the work you need to do.
Start with a business workflow, then use the complete capability directory below when you want to inspect individual controls.
Manage workforce access
Employee identity, lifecycle, groups, roles and self-service.
Workforce identity →Protect APIs and delegated actions
Resources, permissions, scopes, API keys and authorization boundaries.
Access & authorization →Operate and support identities
Service desks, recovery, workflows and reviewable operational actions.
Support operations →Browse by area
Identity & people
Identity records, persona-specific behavior, employee lifecycle and tenant boundaries.
Features / Identity visibility
Identity Dashboard
A starting point for understanding identities, their classification and the access-related tasks that need attention.
Explore capability ↗Features / Portals
Admin, Employee & Customer Dashboards
Separate dashboard experiences for administrators, employees and customers, aligned with each identity category’s responsibilities.
Explore capability ↗Features / Identity types
Customers
Represent external users of a business application with a customer-specific profile, credential and lifecycle policy.
Explore capability ↗Features / Identity types
Employees
Give employees the self-service and internal access path appropriate to their employment status and responsibilities.
Explore capability ↗Features / Non-human identities
Service Users
Give recurring operational work a distinct, named identity instead of sharing a human account or an employee’s credentials.
Explore capability ↗Features / Test environments
Test Users
Create test identities for end-to-end automation and load testing with an explicit lifecycle and safe operational boundaries.
Explore capability ↗Features / Multi-tenancy
Tenants
Represent each B2B customer organization as a distinct administrative and policy scope.
Explore capability ↗Features / Membership management
Groups
Organize identities into named memberships that can support application assignment, role assignment and policy administration.
Explore capability ↗Products / Tenant identity
B2B SaaS
Give each business customer a clear administrative boundary for members, groups, SSO, provisioning and tenant-level policy.
Explore capability ↗Products / Identity lifecycle
User Lifecycle Management
Coordinate identity creation, profile completion, credential enrollment, status changes and deactivation with explicit rules.
Explore capability ↗Browse by area
Access & authorization
Roles, scopes, resource access, entitlement review and expirable associations.
Products / Access policy
Access & Authorization
Connect identity, roles, groups, scopes and explicit resource assignments to the decision about what an actor may do.
Explore capability ↗Products / Governance
Access Reviews
Review existing access against current responsibilities, resource owners and policy—not just against the date access was granted.
Explore capability ↗Features / Support controls
Impersonation
Allow authorized support work to view an assigned customer context only where policy permits and where activity remains attributable.
Explore capability ↗Features / Time-bound access
Expirable Access & Association
Represent temporary access or membership associations with an explicit end condition instead of relying on someone to remember to remove them.
Explore capability ↗Features / Authorization
Multi-Role Support
Allow access to be described through more than one role assignment where the policy model requires it.
Explore capability ↗Features / Privileged identity
Privileged Access Management (PAM)
Treat privileged access as a high-impact capability with explicit ownership, least privilege, review and an audit trail.
Explore capability ↗Features / Access inventory
Entitlements
Make the access a person or workload has understandable as specific memberships, roles or permissions on resources.
Explore capability ↗Features / Resource visibility
Resource Catalogue
Help people discover applications, groups and resources that are relevant to their role or available for access request.
Explore capability ↗Features / Role-based access
Roles
Bundle related permissions into roles that reflect responsibility and can be assigned, reviewed and removed deliberately.
Explore capability ↗Features / Delegated authorization
Scopes
Express the permissions a client or token requests and receives in a vocabulary the receiving resource can enforce.
Explore capability ↗Features / Resource modelling
Custom Resources
Represent application-specific objects as resources so roles and access rules can be attached to the thing being protected.
Explore capability ↗Features / Fine-grained authorization
Custom Permissions
Express application-specific actions more precisely than a broad role name can communicate.
Explore capability ↗Features / Decision enforcement
Authorization Service
Keep authorization decisions consistent by evaluating policy at the service that protects the resource or operation.
Explore capability ↗Features / Finding access
Resource Discovery
Make relevant resources discoverable with ownership and purpose information so users can request the right access.
Explore capability ↗Browse by area
Authentication & security
Factor assurance, adaptive decisions, network controls and credential safety.
Features / Credential management
API Keys
Manage API keys as credentials with an owner, scope, allowed use, lifecycle and reviewable activity.
Explore capability ↗Features / Policy evaluation
Adaptive Security
Choose the amount of verification or friction based on context instead of treating every identity action as equally risky.
Explore capability ↗Features / Authentication policy
Authentication Assurance Support
Express the level of authentication required for an identity or action, rather than treating every combination of authenticators as equivalent.
Explore capability ↗Features / Authentication
Multi-Factor Authentication
Combine authenticator types deliberately to increase confidence in an identity before sensitive actions.
Explore capability ↗Features / Passkeys
AAGUID Filtering for Passkeys
Use authenticator model identifiers as one input to a WebAuthn/passkey policy where the implementation exposes and validates the relevant attestation data.
Explore capability ↗Features / Network controls
Advanced Network / IP Rules
Apply allow and deny rules to the network context of roles, identity categories, tenants, provisioning integrations and API keys.
Explore capability ↗Features / Abuse prevention
Rate Limiting
Limit repeated operations across relevant dimensions to reduce credential stuffing and slow abuse of compromised identities.
Explore capability ↗Products / Adaptive policy
Advanced Adaptive Security
Apply stronger verification when identity, device, resource, credential or usage context calls for additional assurance.
Explore capability ↗Products / Credential management
Vault
Organize sensitive integration credentials around an explicit owner, intended use, access boundary and lifecycle.
Explore capability ↗Products / Machine identity
OAuth2 Credential Store
Manage OAuth2 client credentials and related application identity in the context of its intended integration.
Explore capability ↗Trust / Security architecture
Security
Explore the security principles documented for WebFrolic: bounded identity flows, configurable assurance, network restrictions, rate limits and auditability.
Explore capability ↗Browse by area
Lifecycle & integrations
Attribute governance, provisioning, event integration and delivery configuration.
Features / Identity data
Custom Attributes
Capture business-specific profile information while keeping attribute ownership, validation and policy use explicit.
Explore capability ↗Features / Workflow context
Variables
Use explicit variables to carry defined context through a workflow, rule evaluation or integration step.
Explore capability ↗Features / Integration
Webhooks
Connect identity and operational events to downstream systems using a documented event contract and controlled receiver.
Explore capability ↗Features / Workforce provisioning
SCIM for Employee Applications
Synchronize workforce identity changes to employee applications through a defined provisioning contract.
Explore capability ↗Features / Tenant provisioning
SCIM for B2B SaaS
Let a business customer’s identity system provision members and groups into the correct tenant of a B2B SaaS application.
Explore capability ↗Features / Identity administration
SCIM for Identity Provider
Connect the identity provider to upstream or downstream provisioning systems with a clear ownership and authorization boundary.
Explore capability ↗Features / Delivery configuration
Custom Email Providers
Configure email delivery to fit the organization’s operational, branding and domain requirements where supported.
Explore capability ↗Features / Delivery configuration
Custom SMS Provider
Connect an SMS delivery provider for supported one-time-passcode or service notifications while keeping authentication policy independent of delivery choice.
Explore capability ↗Features / User experience
Branding
Align identity screens and user-facing messages with the organization’s product experience without weakening security cues.
Explore capability ↗Features / Consent and lifecycle
Terms & Privacy Lifecycle
Treat terms acceptance and privacy-related profile state as lifecycle information that should be collected and handled deliberately.
Explore capability ↗Features / Identity-flow integrity
Transactions
Treat related identity operations as a coordinated sequence where order, dependencies and completion state matter.
Explore capability ↗Browse by area
Portals & operational work
Dedicated workspaces and structured workflow for tenant admins, employees and support teams.
Features / Delegated administration
B2B Tenant Portal
Give tenant administrators a controlled interface for managing members and selected organization-specific identity settings.
Explore capability ↗Features / Administration
Administrator Portal
Give authorized administrators a dedicated interface for configuring identity resources and platform-level policies.
Explore capability ↗Features / Workforce experience
Employee Portal
Provide a focused workspace for internal users to discover resources, request or review access and follow IT service requests.
Explore capability ↗Features / Internal support
IT Support Desk Portal
Give service-desk agents a work surface for internal employee tickets, categories, assignment and runbooks.
Explore capability ↗Features / Customer support
Customer Support Portal
Help customer-support staff manage cases and approved customer context while preserving controls around identity changes.
Explore capability ↗Products / Employee operations
IT Support Desk
Connect internal employee requests to ticket categories, configurable fields, assignment rules, service expectations and runbooks.
Explore capability ↗Products / Support operations
Customer Support Desk
Give support teams a focused place to handle customer tickets and profile-related issues with role-aware access.
Explore capability ↗Features / Service desk configuration
Ticket Categories
Structure support requests into categories with purpose-built fields, validation, service expectations, assignment and runbooks.
Explore capability ↗Features / Orchestration
Workflows
Represent a multi-step identity or support process with explicit state, order, dependencies and failure behavior.
Explore capability ↗Products / Orchestration
Workflows / Automation
Coordinate identity events, policy checks, approvals and operational tasks as a traceable flow rather than isolated scripts.
Explore capability ↗Products / Orchestration
Automation
Use policy-driven actions to reduce repeated identity administration while keeping the trigger and outcome understandable.
Explore capability ↗Features / Access governance
Access Workflows
Coordinate an access request from business justification through review, approval, fulfillment and confirmation.
Explore capability ↗Features / Employee operations
Employee Self Service
Let employees complete routine, approved tasks—such as requesting access and following IT tickets—without giving them administrative power.
Explore capability ↗Products / Trust and evidence
Audit
Make identity and access actions reviewable with a durable record of who acted, in what context and in what order.
Explore capability ↗Products / Governance
Compliance & Audit
Turn policy requirements into configuration, evidence and repeatable reviews that can be inspected by internal stakeholders.
Explore capability ↗Next step
Explore the capability behind your requirement
Use the directory to find the feature, then verify exact availability and configuration in the connected documentation or deployment.