Security & Identity

Identity & SSO

Help prevent identity attacks and secure access to apps and resources.

Your networkNIM · one identityYour applicationsStaff and customersOne accountUser directoryStays in placeConnectorOutbound only, 443/TLSSign-in pageYour domain, your brandGroups and rolesNo role, no tokenAudit trailExported to your SIEMOIDCOAuth 2.0SAML 2.0SP or IdPCluster, VPNSame identity

A cloud identity and access management solution

  • Secure adaptive access

    Prevent identity attacks with strong authentication and risky sign-in signals: sign-ins from a new network, a new country or an impossible journey are asked for extra verification.

  • Simplify user experiences

    Deliver fast and efficient sign-in experiences for your workforce. Apps open in one click from the self-service portal, and users reset forgotten passwords themselves.

  • Unify and centralise identity and access management

    Manage local users and users from Active Directory side by side in one console, and access to every app from one place, to improve visibility, security and control.

  • Keep your data in Türkiye

    User, session and audit data are kept in data centres in Türkiye.

Example scenarios

  • A company opening dozens of apps to staff with one sign-in

    Apps open from the self-service portal with one click. For apps without single sign-on, the password is kept in an encrypted vault and the login form is filled in automatically.

  • An organisation stopping sign-ins from abroad

    A conditional access rule allows sign-ins from Türkiye only. Sign-ins from a new network or with impossible travel are asked for an extra check.

  • An IT team managing Active Directory users in one console

    Users from Active Directory and local users are managed in the same console. Access to apps is granted and withdrawn in one place.

Protect identities and secure access

  • App integrations and SSO

    Connect apps that support OpenID Connect and SAML with a step-by-step wizard. For apps without single sign-on, the password is kept in an encrypted vault and the sign-in form is filled automatically.

  • Strong authentication

    Safeguard access to data and apps with multi-factor authentication through push approval in the mobile app. If a user loses their phone, an administrator resets the method.

  • Conditional access

    Allow sign-in, ask for extra verification or deny it based on user, group, app and country — for example, allow sign-in only from Türkiye.

  • Identity protection

    Check for leaked passwords without the full password ever leaving the network. Automated sign-in attempts are stopped by bot protection that runs on the platform's own servers, with no image puzzles.

  • Access governance

    Enforce least-privilege access with access requests and approvals, access packages, periodic access reviews and separation-of-duties rules.

  • Employee self-service

    Employees see and close their open sessions, revoke permissions they gave connected apps and download their own activity log.

Manage and protect

  • Audit log

    Sign-ins, password and multi-factor events and administrator actions are logged with who, when, which IP address and which app; logs are kept for 365 days by default.

  • SIEM export

    Send audit logs to your own SIEM as syslog, CEF or JSON, or by webhook.

  • Redundant operation

    The identity platform runs redundantly in production.

Pricing based on your number of users

Identity & SSO is billed per user. Price lines are set out in the quote.

Papers, a calculator and a laptop on a desk

Learn more to get started

  • Software companies

    Add customer sign-in and access to your cluster and pipeline to your product.

  • Enterprise IT

    Hand over the server room and free your team for business applications.

  • Partners

    Get the infrastructure and support to offer cloud services under your own brand.

  • Kubernetes

    Learn about the de facto standard for running container workloads.

Technical specifications

Frequently asked questions