> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Authentication and security

Use IDaaS authentication and security features to protect access to your applications and APIs. This section explains how to configure authenticators, group policies, risk engines, resource rules, CORS, and IP lists.

## Topics in this section

[📄️Group policies Group policies let you override global settings for specific groups of users. When you create a group policy and change a setting, the change applies only to the users in the group assigned to that group policy.](/docs/authentication-and-security/manage-group-policies.md)

[🗃Authenticators 21 items](/docs/authentication-and-security/manage-authenticators.md)

[🗃External risk engines 3 items](/docs/authentication-and-security/manage-external-risk-engines.md)

[🗃Resource rules 5 items](/docs/authentication-and-security/create-and-manage-resource-rules.md)

[🗃Certificate authorities 5 items](/docs/authentication-and-security/manage-certificate-authorities.md)

[🗃Domain controller certificates 2 items](/docs/authentication-and-security/configure-domain-controller-certificates.md)

[🗃Device verification 3 items](/docs/authentication-and-security/manage-device-verification.md)

[🗃Smart Login 5 items](/docs/authentication-and-security/manage-smart-login.md)

[📄️Cross-Origin Resource Sharing (CORS) The Cross Origin Resource Sharing (CORS) feature prevents a Web page from making a request initiated from another origin. When enabled, other origins can make API calls to your account. By default, CORS is enabled for new IDaaS accounts.](/docs/authentication-and-security/manage-cross-origin-resource-sharing-cors.md)

[📄️IP lists You can configure IPs and CIDRs (Classless Inter-Domain Routing) as IP Lists and add them to an Administration API application. IP Lists restrict user access only to IDaaS Admin API applications linked to the IP addresses included in the IP List. IP Lists can also be associated to IP source addresses in resource rules to be used to restrict user access based on the IPs defined in the list.](/docs/authentication-and-security/manage-ip-lists.md)

[🗃Passkey implementation 4 items](/category/passkey-implementation/)

[🗃Workload identities 2 items](/docs/authentication-and-security/workload-identities.md)