Solutions
Solutions
The same directory serves three kinds of user. Here is what each gets from it.
For identity and platform teams
Turn the directory you already keep into access on the platforms you run.
- One read-only cache of directory users and groups, fed by a sync source
- Access bindings from groups to GitHub, Azure DevOps and GitLab, previewed before they apply
- Enforcement per target, from report only to full, with protected principals never revoked
For engineers
Look someone up, or fetch their SSH keys, without asking anyone.
- Search and lookups by account name, DN, objectGUID or employee number
- Groups with nested groups already expanded to people
- SSH keys of a person or a whole group in one request
For automation and other systems
Hear about directory changes and read what is public, from scripts and services.
- Signed webhook events for publish changes, sync runs and access runs
- An unauthenticated, PII-free public search
- An OpenAPI document to generate clients from