Identity and Access management

Zero Trust future


Your email address in Microsoft Active Directory (AD)  defines digital identity and access rights.


Digital Identity is connected to real life with device biometrics (Apple, Android or Microsoft).


Access on demand based on your Microsoft identity and multifactor authentication with

  • Approved device(s) as approved by your employeer
  • Physical Location (GPS)
  • Time zone (provided by the network)
  • Automated Role-Based Access (RBAC) is granted on
  • Just Enough Access (JEA) and Just-in-Time (JIT) basis only.


Application specific password solutions will be hidden or replaced with Single Sign On (SSO) by Microsoft Entra or similar Identity management solution.



Employer needs to record who-did-what-when-where-with which device in the invisible digital world like survellance cameras in public places or call recordings at customer service.