Overview Service health, coverage, and operator next steps.People Principals, assignments, credentials, and OTP posture.User Mgmt Directory-style links for users, groups, devices, apps, roles, domains, and support.Platforms Platform, tenant, admin, and user responsibility.Roles Standard roles, permissions, risks, and grant paths.Passwordless Passkey, FIDO, OTP, origin, and recovery controls.Registrations Admin, tenant, user, and approval workflow queues.Approvals High-risk registration gates, approver eligibility, and impact preview.Access Reviews Periodic review queues for admins, users, agents, credentials, and dormant access.Custom Roles Draft, validate, compare, and prepare approval for tenant-scoped role variants.Groups Derived OS, platform, tenant, agent, service, and review group membership.Security Policy Passwordless, OTP, session, approval, separation-of-duty, and storage posture.Recovery Lost device, credential replacement, OTP step-up, and recovery readiness.Sessions Scoped sessions, device credentials, app access, revocation, and suspicious activity.App Clients Standalone app clients, redirect posture, OpenAPI, MCP, A2A, and auth handoff.Break Glass Emergency access preparation, approval guardrails, expiry, and review evidence.Audit Decision trail, risk levels, and source channels.Agents Agent identities, MCP, A2A, and app integration access.Console Live test bench for exercising the service.

Auth / RBAC

App Clients and Domains

Review shared-auth app clients, standalone domain posture, redirect handoff, OpenAPI, MCP, and A2A.

loading

Loading app client contracts