IFO4
Loading...SAML 2.0, OIDC, and SCIM integration with every major identity provider. Setup in under 30 minutes with our guided configuration wizard.
Industry-standard Security Assertion Markup Language for enterprise SSO. Supports SP-initiated and IdP-initiated login flows with signed assertions and encrypted name IDs.
Modern OAuth 2.0 based identity protocol. Supports Authorization Code flow with PKCE for maximum security. Compatible with any OIDC-compliant identity provider.
System for Cross-domain Identity Management for automated user lifecycle management. Automatically provision, update, and deprovision users as changes occur in your identity provider.
Full platform access including user management, SSO configuration, billing, and all data
Full access to cost data, recommendations, governance policies, and reporting across all accounts
Cost data access for assigned teams/accounts. Create budgets, dashboards, and reports within scope
Read access to cost data and recommendations. Create personal dashboards and export data
Read-only access to shared dashboards and reports. No data export or configuration access
Programmatic access with configurable scopes. Rate limits per service account with audit logging
Enforce MFA for all users with support for TOTP authenticator apps, SMS, and hardware security keys (FIDO2/WebAuthn). Configurable per-role MFA requirements.
Restrict platform access to approved IP ranges and CIDR blocks. Support for VPN and corporate network ranges with automatic violation alerting.
Configurable session timeouts from 15 minutes to 24 hours. Concurrent session limits, forced logout, and active session monitoring.
Define access policies based on user location, device type, risk level, and time of day. Integrate with Azure AD Conditional Access and Okta policies.
Complete audit trail of all authentication events, permission changes, and data access. Export to SIEM platforms via Splunk, Datadog, or syslog.
Configurable password complexity, rotation, and history requirements for local accounts. Integration with corporate password policies via SSO.
Our implementation team will configure SSO for you as part of enterprise onboarding.
Contact Sales