By time
When a user may sign in or reach a given system.
Dejh
| Capability | What it covers |
|---|---|
| Authentication | Central sign-in and identity verification for users and applications |
| Authorisation | What each user and service may reach |
| Role-based access | Roles for applications and resources across the organisation |
| Sessions | Session and token lifetime, sign-out and continuity of access |
| OAuth 2.0 | Authorisation flows for applications and services |
| OpenID Connect | Identity tokens and user authentication for modern applications |
| Audit | Sign-ins, access decisions, policy actions and administrative activity |
| Administration | Users, roles, applications, clients, policies and access rules in one place |
| Method | Use |
|---|---|
| Username and password | Standard sign-in for staff |
| Authenticator app | Time-based one-time codes |
| One-time code by SMS | An extra factor sent to a phone |
| One-time code by email | Codes for selected flows |
| External identity providers | Sign-in through your existing identity sources |
When a user may sign in or reach a given system.
Which networks and address ranges access may come from.
Different requirements for different applications and services.
Joining, changing role, updating access and leaving.
Tell us about your environment and what you need. One of our specialists will answer you.