01
RBAC and groups
Superadmin, administrator, auditor and user roles with temporary assignments.
Complete lifecycle
From access request
to verifiable evidence.
Capabilities are designed as one coherent governance process rather than a collection of disconnected tools.
In depth
Controls for every role.
Administrators, approvers, auditors and users each receive a focused console and granular capabilities.
02
LDAP and OIDC
Integrate Active Directory, LDAP directories and OpenID Connect identity providers.
03
Contextual policies
Combine groups, targets, credentials, protocols, networks, schedules and quotas.
04
Approval quorum
Require multiple decisions and enforce separation of duties.
05
SSH and RDP
Recorded SSH sessions and HTML5 RDP through Apache Guacamole.
06
MFA and recovery
Mandatory local TOTP with managed recovery codes.