Identity Management

Identities in the Cyolo platform are entities such as users, user groups, and API keys. Identities can be assigned end user, administrative, supervisory, and auditing roles. By default, all users are end users until explicitly added to a role. End users can be configured to have access to applications and other resources hosted at corporate premises.

There are three types of groups:

• Cyolo Groups - Administrators can create Cyolo groups and assign users to those groups. Cyolo groups are not linked to any specific IdP and are static (the system does not change their members, only administrators).
• External Groups - Exported from external IdPs. When the IdP's automatic provisioning option is enabled, the system creates external groups upon SCIM requests arriving from the IdP, or during the polling cycle to the LDAP-based IdP.
• Dynamic Groups - Administrators can create dynamic groups on a specific external IdP. Upon user logins, the system receives the user group membership from the external IdP - and accordingly, allows or denies access to applications.