Products / Identity foundations
Identity Provider
A central identity layer for applications, people, tenants and machine-linked actors.
Explore capability ↗Product platform
Products
Explore a connected identity platform for B2B SaaS: manage customer and workforce identities, delegate tenant administration, set access boundaries, connect provisioning, and keep operational decisions traceable.
Browse by area
Identity foundations
Model different people, tenants and application actors with the lifecycle and authentication rules they require.
Products / Identity foundations
Customer Identity
Manage the identities that use your customer-facing applications, with lifecycle and credential rules designed for external users.
Explore capability ↗Products / Identity foundations
Workforce Identity
Apply employee-specific identity lifecycle, authentication and access policy without treating employees as ordinary customer accounts.
Explore capability ↗Products / Tenant identity
B2B SaaS
Give each business customer a clear administrative boundary for members, groups, SSO, provisioning and tenant-level policy.
Explore capability ↗Products / Identity lifecycle
User Lifecycle Management
Coordinate identity creation, profile completion, credential enrollment, status changes and deactivation with explicit rules.
Explore capability ↗Browse by area
Authorization and APIs
Connect grants, roles, scopes and resource boundaries to the operations they protect.
Products / Access policy
Access & Authorization
Connect identity, roles, groups, scopes and explicit resource assignments to the decision about what an actor may do.
Explore capability ↗Products / Developer platform
Resource Server
Design protected APIs around explicit token validation, scopes and the resource permissions that apply to each request.
Explore capability ↗Products / Machine identity
OAuth2 Credential Store
Manage OAuth2 client credentials and related application identity in the context of its intended integration.
Explore capability ↗Features / Credential management
API Keys
Manage API keys as credentials with an owner, scope, allowed use, lifecycle and reviewable activity.
Explore capability ↗Features / Resource modelling
Custom Resources
Represent application-specific objects as resources so roles and access rules can be attached to the thing being protected.
Explore capability ↗Browse by area
Governance and operations
Carry policy into request, provisioning, support and audit workflows.
Products / Governance
Access Reviews
Review existing access against current responsibilities, resource owners and policy—not just against the date access was granted.
Explore capability ↗Products / Orchestration
Workflows / Automation
Coordinate identity events, policy checks, approvals and operational tasks as a traceable flow rather than isolated scripts.
Explore capability ↗Products / Orchestration
Automation
Use policy-driven actions to reduce repeated identity administration while keeping the trigger and outcome understandable.
Explore capability ↗Products / Trust and evidence
Audit
Make identity and access actions reviewable with a durable record of who acted, in what context and in what order.
Explore capability ↗Products / Governance
Compliance & Audit
Turn policy requirements into configuration, evidence and repeatable reviews that can be inspected by internal stakeholders.
Explore capability ↗Products / Provisioning
SCIM Provisioning
Use SCIM to make user and group provisioning changes more consistent between an identity system and connected applications.
Explore capability ↗Products / Support operations
Customer Support Desk
Give support teams a focused place to handle customer tickets and profile-related issues with role-aware access.
Explore capability ↗Products / Employee operations
IT Support Desk
Connect internal employee requests to ticket categories, configurable fields, assignment rules, service expectations and runbooks.
Explore capability ↗Browse by area
Security and credentials
Apply authenticator assurance, network rules and credential lifecycle controls where required.
Products / Adaptive policy
Advanced Adaptive Security
Apply stronger verification when identity, device, resource, credential or usage context calls for additional assurance.
Explore capability ↗Products / Credential management
Vault
Organize sensitive integration credentials around an explicit owner, intended use, access boundary and lifecycle.
Explore capability ↗Features / Abuse prevention
Rate Limiting
Limit repeated operations across relevant dimensions to reduce credential stuffing and slow abuse of compromised identities.
Explore capability ↗Features / Network controls
Advanced Network / IP Rules
Apply allow and deny rules to the network context of roles, identity categories, tenants, provisioning integrations and API keys.
Explore capability ↗Features / Authentication
Multi-Factor Authentication
Combine authenticator types deliberately to increase confidence in an identity before sensitive actions.
Explore capability ↗Next step
Start with the identity boundary
Pick one use case and follow the relevant product and developer documentation before expanding the scope.