Identity & Access

One identity for every person your business deals with — and precise control over what each one can do.

Identity & Access is how ABS knows who someone is and decides what they're allowed to do. Every contact — customer, employee, partner, or guest — authenticates through one identity model, and every action is authorized and auditable. It's the capability the whole platform leans on, so isolation between tenants and least-privilege access are foundational, not add-ons.

This is about access, not proof. Proving that a document or action is authentic and tamper-evident is a separate capability — see Trust & Compliance.

What you can do

• Sign people in with passwords, multi-factor authentication, and federated or social identity providers.
• Authorize precisely with roles and fine-grained permissions: grant least privilege and share access safely.
• Federate with your directory through OAuth/OIDC, so existing corporate identities work out of the box.
• Scope everything to a tenant, so one identity model cleanly serves many organizations.
• Audit access — keep a trail of who signed in and what they changed.

Modules that deliver it

Module	What it does
IAM	Users, roles, and central access management
Security	Tenant access, permissions, and security & audit logs

Built on the Alliance Passport Service (APS) foundation. To build on it, see Web API development.