Identity & access
Who can sign in, how they prove it, and what changed after.
Single sign-on across your systems, access that follows the org chart, Nafath for the public, and a record of every sign-in and every change an administrator makes.
- One login across every app
- Nafath sign-in for the public
- Policies, sessions and passkeys
Three questions
Every identity system answers the same three.
- 01
Who can sign in
Staff sign in once for every app. The public comes through a separate door, with Nafath.
- 02
How they prove it
Policies, sessions and passkeys for staff. For the public, a national ID or Iqama, then a number confirmed in the Nafath app.
- 03
What changed after
Every sign-in, and every change an administrator makes, kept on the record.
Access profiles
Access is set in settings.
Each app declares the permissions it has. Those are bundled into access profiles, and the org tree decides who sees and directs the work beneath them. Changing someone's access is an edit in settings, with no new release.
- Apps declare their own permissions
- Profiles bundle them for a role
- The org chart sets what each person can see
What we set up
Everything around the login.
Single sign-on
One login across the portal and every app behind it.
User directory
Each person, whether the account is active, and whether the email is confirmed.
Access profiles
Permissions each app declares, bundled for each role.
Org-chart permissions
Managers see and direct the work of the units beneath them.
Nafath sign-in
A separate door for the public, with the national identity app.
Policies and sessions
Rules for how people sign in, and how long they stay signed in.
Passkeys
Sign-in without a password where the device supports it.
Audit record
Every sign-in and every administrator change, on the record.
Arabic and English
The admin screens and the sign-in pages, in both languages.
Questions we hear
Can the public sign in with Nafath?
Yes. The public has its own door: a national ID or Iqama, then a number confirmed in the Nafath app.
Do staff and the public share one login page?
No. Staff use single sign-on with their organization account. The public comes in through Nafath, separately.
Can we see who changed what?
Yes. Every sign-in and every change an administrator makes is recorded.
Too many logins, and no record of who changed what?
Tell us which systems people use today. We'll show how one sign-in would cover them.