Authentication & Authorisation
Authentication is controlled via a combination of a custom Sitemate auth service sitting on top of AWS Cognito & FusionAuth.
Authorization in Dashpivot is via Role Based Access Control (RBAC). Access to data is defined within Dashpivot based on business and security requirements - either preventing or allowing users from viewing and editing data.
SSO (Single Sign On) and MFA (Multi-factor Authentication)
Improve security by utilising Single Sign-On, ensuring that only authorised users are able to access the platform.
With SSO, users don't have to remember multiple secure passwords, which can be time-consuming and frustrating.
Sitemate supports Microsoft Azure, Okta and Rippling.
The OAuth2 framework is used for authorization. OAuth2 is a protocol that allows a user to grant a third-party web site or application access to the user's protected resources, without necessarily revealing their long-term credentials or even their identity.