Products / Tenant identity
B2B SaaS
Give each business customer a clear administrative boundary for members, groups, SSO, provisioning and tenant-level policy.
Explore capability ↗By use case
Start with the job your team needs to complete: onboard a business tenant, connect enterprise SSO, manage workforce access, provision accounts, support users or protect an API. Each solution connects identity context with the policy and operational workflow around it.
Browse by area
Identity boundaries for business customers, delegated tenant admin and member lifecycle.
Products / Tenant identity
Give each business customer a clear administrative boundary for members, groups, SSO, provisioning and tenant-level policy.
Explore capability ↗Products / Identity foundations
Manage the identities that use your customer-facing applications, with lifecycle and credential rules designed for external users.
Explore capability ↗Features / Multi-tenancy
Represent each B2B customer organization as a distinct administrative and policy scope.
Explore capability ↗Features / Delegated administration
Give tenant administrators a controlled interface for managing members and selected organization-specific identity settings.
Explore capability ↗Features / Tenant provisioning
Let a business customer’s identity system provision members and groups into the correct tenant of a B2B SaaS application.
Explore capability ↗Browse by area
Employee lifecycle, access review and employee-facing operational workflows.
Products / Identity foundations
Apply employee-specific identity lifecycle, authentication and access policy without treating employees as ordinary customer accounts.
Explore capability ↗Features / Identity types
Give employees the self-service and internal access path appropriate to their employment status and responsibilities.
Explore capability ↗Features / Workforce provisioning
Synchronize workforce identity changes to employee applications through a defined provisioning contract.
Explore capability ↗Products / Governance
Review existing access against current responsibilities, resource owners and policy—not just against the date access was granted.
Explore capability ↗Features / Employee operations
Let employees complete routine, approved tasks—such as requesting access and following IT tickets—without giving them administrative power.
Explore capability ↗Browse by area
Application integration and machine identity with scoped access, credentials and automation.
Products / Developer platform
Design protected APIs around explicit token validation, scopes and the resource permissions that apply to each request.
Explore capability ↗Features / Credential management
Manage API keys as credentials with an owner, scope, allowed use, lifecycle and reviewable activity.
Explore capability ↗Products / Machine identity
Manage OAuth2 client credentials and related application identity in the context of its intended integration.
Explore capability ↗Features / Non-human identities
Give recurring operational work a distinct, named identity instead of sharing a human account or an employee’s credentials.
Explore capability ↗Features / Integration
Connect identity and operational events to downstream systems using a documented event contract and controlled receiver.
Explore capability ↗Browse by area
Support experiences, recovery controls and evidence around identity actions.
Products / Support operations
Give support teams a focused place to handle customer tickets and profile-related issues with role-aware access.
Explore capability ↗Products / Employee operations
Connect internal employee requests to ticket categories, configurable fields, assignment rules, service expectations and runbooks.
Explore capability ↗Features / Support controls
Allow authorized support work to view an assigned customer context only where policy permits and where activity remains attributable.
Explore capability ↗Products / Trust and evidence
Make identity and access actions reviewable with a durable record of who acted, in what context and in what order.
Explore capability ↗Products / Adaptive policy
Apply stronger verification when identity, device, resource, credential or usage context calls for additional assurance.
Explore capability ↗Next step
A useful evaluation follows one identity change from request or event through policy, fulfillment and reviewable evidence.