Menu

Identity &
Access Management

Control user identities, store and manage authorization credentials, and ensure secure access to APIs and applications.

third_block_conditional_mfa (1)
Postnl
April
Tide
Swiss Post
xylem_white
blueyonder_white
michelinlogo_apimanagement (1)
Roche v2 (1)
ey_white_80p
skf-image-1
prosperawhite
dp-logo-white_2
IAM + APIM

IAM + API Management = advanced API and application security

Define access roles and enforce advanced authorization for your applications and APIs. Combine Gravitee IAM with our Federated API Management solution for centralized API access control and authorization.

Whether you need to authenticate internal or external users of your product or platform, you’ll need a modern Access Management solution to store credentials and enforce authentication flows. 

Gravitee Access Management is a fully-featured, fully-fledged authentication engine. Design authentication flows, federate identity management, enforce passwordless auth, and build secure, user-friendly authentication methods.

first_block_user_authentication
User authentication

Balance security with user experience

Design and enforce strict—yet user-friendly—authorization protocols and flows for your applications and APIs.

No matter what kind of authentication and onboarding flows you want to design, Gravitee offers a solution. 

Gravitee currently supports the following auth protocols:

  • OAuth2
  • OpenID Connect
  • UMA 2.0
  • SCIM 2.0
  • FAPI 1.0
  • CIBA 1.0
  • SAML 2.0
Multi-Factor Auth Verification
Multi-factor authentication

Implement top-notch MFA experiences

Strengthen your security posture with user-friendly MFA options, all supported out of the box by Gravitee Identity and Access Management.

Multi-factor authentication (MFA) provides a way to add additional steps during the login flow to enforce access control. This ensures that only valid users can access their accounts even if their credentials have been compromised.

Gravitee supports several different authentication factors, such as email, one-time-password, biometric factors, recovery codes, and more.

third_block_resources_and_factors
API Security

IAM + the Gravitee API Gateway = advanced API security

Cover your every API Security need by combining the security functionality of both Gravitee's API Gateway and the Gravitee IAM solution.

Working with an API Gateway to enforce API authorization, such as OAuth2 API auth? 

Gravitee Access Management can be used as an OAuth2 authorization resource by your API Gateway. This essentially means that, when your API Gateway enforces OAuth2 authorization at the moment of an API request, that Gateway will “call” Gravitee Access Management for credential checking.

This is even more powerful when combining Gravitee Access Management with the Gravitee API Gateway. Gravitee Access Management is a preconfigured authorization resource and can be configured as your auth provider in a matter of a few clicks.

api_oauth2

Customer Stories

"Gravitee IAM has enabled us to allow the right people to have delegated access to our products. And, we can do all of this in a way that’s secure enough for a FinTech platform and for open banking compliance. Rules and regulations require secure payment initiation, and Gravitee Access Management allows us to easily control who has access to the API that governs payment initiative in Tide. 

This allows us to build our product so that our users can delegate bill payment functionality to the right people and nobody else.”

Stephen Robinson / Solution Architect tide-logo

"One: I don’t have to worry about compliance anymore. I’m super happy about that. Two: I know there’s a full team available for us that can help with any issues that come up. And three: Gravitee’s ease of use and friendliness of the UI has been extremely helpful for our team to get things done quickly."

Oussama Bennis / CTO billo color logo_Billo color