Authentication & MFA
Set the proof each sign-in or sensitive action must provide.
Explore this feature →AIdentity / Who we protect
An identity for every kind of actor
Employees and partners. Applications and workloads. AI agents, robots, drones and connected machines. AIdentity brings them into a common governance model with appropriate proof for each identity type.
What this means for your team
- Track ownership, lifecycle, permissions and accountability across human and non-human identities.
- Keep a human sponsor, an agent definition and an executing agent instance distinct.
- Use identity-specific authentication and credential policies rather than sharing a human login with a machine.
A practical example
A developer launches a task agent; an operations team enrolls a robot. Both need identity and policy, but the robot does not complete human MFA.
How it works
Select a step to read its explanation
- Register the person, service, Agent or device as its own identity rather than sharing another actor’s account.
- Record who owns the identity and the purpose it serves so its authority has an accountable origin.
- Select proof appropriate to the actor: human authentication differs from workload or device authentication.
- Grant only the relevant permissions and scope, subject to the configured policy and review controls.
- Maintain ownership and credentials over time; suspend, offboard or revoke the identity when its purpose ends.
1 / 5
This example illustrates the journey. Select any step to explore it at your own pace.
Explore more AIdentity features
RBAC, ABAC & ReBAC
Decide access using roles, attributes and relationships together.
Explore this feature →Identity lifecycle
Keep access aligned with joining, changing teams and leaving.
Explore this feature →Federation & applications
Connect applications and identity providers to a governed sign-in experience.
Explore this feature →Identity Graph
Understand who can reach a resource and which relationships give them access.
Explore this feature →Privileged roles (PIM)
Activate powerful roles for a bounded task rather than leaving them always on.
Explore this feature →Privileged access (PAM)
Govern access to privileged targets and credentials.
Explore this feature →Governance & approvals
Put reviews and independent decisions around sensitive access changes.
Explore this feature →Built-in agents & automation
Turn continuous identity analysis into evidence-backed recommendations and approved actions.
Explore this feature →Ask AIdentity
Ask questions about identity and access with authorization still enforced.
Explore this feature →Agent & device identity
Give agents and devices their own credentials, ownership and revocation path.
Explore this feature →Audit & privacy
Trace identity decisions while controlling access to sensitive evidence.
Explore this feature →