Authentication and security
Use IDaaS authentication and security features to protect access to your applications and APIs. This section explains how to configure authenticators, group policies, risk engines, resource rules, CORS, and IP lists.
Topics in this section
Group policies
Group policies let you override global settings for specific groups of users. When you create a group policy and change a setting, the change applies only to the users in the group assigned to that group policy.
Authenticators
21 items
External risk engines
3 items
Resource rules
5 items
Certificate authorities
5 items
Domain controller certificates
2 items
Device verification
3 items
Smart Login
5 items
Cross-Origin Resource Sharing (CORS)
The Cross Origin Resource Sharing (CORS) feature prevents a Web page from making a request initiated from another origin. When enabled, other origins can make API calls to your account. By default, CORS is enabled for new IDaaS accounts.
IP lists
You can configure IPs and CIDRs (Classless Inter-Domain Routing) as IP Lists and add them to an Administration API application. IP Lists restrict user access only to IDaaS Admin API applications linked to the IP addresses included in the IP List. IP Lists can also be associated to IP source addresses in resource rules to be used to restrict user access based on the IPs defined in the list.
Passkey implementation
4 items
Workload identities
2 items