Who we protect
Govern people and machines without making them share an identity.
Explore this feature →AIdentity / Identity lifecycle
Manage identities from arrival to departure
Identity management includes creation, change and removal—not just the sign-in screen.
What this means for your team
- Manage users, groups, memberships, application assignments and self-service access journeys.
- Support joiner, mover and leaver controls, lifecycle scheduling and status changes.
- Connect provisioning and directory workflows using supported System for Cross-domain Identity Management (SCIM), federation and connector capabilities.
- Use bulk operations, delegated administrative scope and governed change paths where appropriate.
A practical example
A team change updates the access journey; an offboarding action removes authority through the relevant lifecycle controls.
How it works
Select a step to read its explanation
- Start from a trusted identity source, such as an approved directory, provisioning connection or governed administrative action.
- Create the identity and provision its approved accounts and assignments through the configured workflow.
- When a person changes team or responsibility, review and adjust memberships and related access under the applicable policies.
- Check that retained access remains appropriate. Route required reviews and changes to the relevant decision-makers.
- Suspend or offboard the identity and remove the relevant access through its lifecycle controls, retaining the decision evidence.
1 / 5
This example illustrates the journey. Select any step to explore it at your own pace.
Explore more AIdentity features
Authentication & MFA
Set the proof each sign-in or sensitive action must provide.
Explore this feature →RBAC, ABAC & ReBAC
Decide access using roles, attributes and relationships together.
Explore this feature →Federation & applications
Connect applications and identity providers to a governed sign-in experience.
Explore this feature →Identity Graph
Understand who can reach a resource and which relationships give them access.
Explore this feature →Privileged roles (PIM)
Activate powerful roles for a bounded task rather than leaving them always on.
Explore this feature →Privileged access (PAM)
Govern access to privileged targets and credentials.
Explore this feature →Governance & approvals
Put reviews and independent decisions around sensitive access changes.
Explore this feature →Built-in agents & automation
Turn continuous identity analysis into evidence-backed recommendations and approved actions.
Explore this feature →Ask AIdentity
Ask questions about identity and access with authorization still enforced.
Explore this feature →Agent & device identity
Give agents and devices their own credentials, ownership and revocation path.
Explore this feature →Audit & privacy
Trace identity decisions while controlling access to sensitive evidence.
Explore this feature →