Who we protect
Govern people and machines without making them share an identity.
Explore this feature →AIdentity / Federation & applications
Connect applications and identity systems
Bring sign-in, app access and provisioning together across the enterprise.
What this means for your team
- Connect supported OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) applications and identity providers for single sign-on.
- Manage application access requests, assignments, credential lifecycle and authentication-policy attachment.
- Use supported directory synchronization and provisioning connectors, including controlled bridge patterns for private environments.
- Keep federation trust and application authorization distinct; a successful external login is not an automatic grant.
A practical example
A partner signs in through a trusted identity provider and receives only their approved application access.
How it works
Select a step to read its explanation
- Connect the supported identity provider or directory that supplies the identity information or sign-in proof.
- Validate the federated assertion within the configured trust relationship rather than treating any external login as trusted.
- Apply the application’s authentication requirements, including stronger proof where the policy requires it.
- Check that the identity actually has the required application assignment or approved access request.
- Establish the authorized session with the appropriate actor and application context for subsequent controls.
1 / 5
This example illustrates the journey. Select any step to explore it at your own pace.
Explore more AIdentity features
Authentication & MFA
Set the proof each sign-in or sensitive action must provide.
Explore this feature →RBAC, ABAC & ReBAC
Decide access using roles, attributes and relationships together.
Explore this feature →Identity lifecycle
Keep access aligned with joining, changing teams and leaving.
Explore this feature →Identity Graph
Understand who can reach a resource and which relationships give them access.
Explore this feature →Privileged roles (PIM)
Activate powerful roles for a bounded task rather than leaving them always on.
Explore this feature →Privileged access (PAM)
Govern access to privileged targets and credentials.
Explore this feature →Governance & approvals
Put reviews and independent decisions around sensitive access changes.
Explore this feature →Built-in agents & automation
Turn continuous identity analysis into evidence-backed recommendations and approved actions.
Explore this feature →Ask AIdentity
Ask questions about identity and access with authorization still enforced.
Explore this feature →Agent & device identity
Give agents and devices their own credentials, ownership and revocation path.
Explore this feature →Audit & privacy
Trace identity decisions while controlling access to sensitive evidence.
Explore this feature →