Enterprise-Grade Identity Synchronization

Process only what changed with watermark-based change detection — uSNChanged for Active Directory, configurable delta columns for SQL databases, and SHA-256 file hash for CSV/TXT files.

Seamlessly sync identities in both directions with conflict resolution and authoritative source management.

Define attribute mappings, transformations, and business rules with a safe transform engine — no eval, no arbitrary code execution.

Complete audit trails with before/after values, run history per connector, and a UI-based audit viewer for all identity changes.

Every audit row is hash-chained with SHA-256 — a single broken link signals post-hoc tampering. One-click chain integrity verification surfaces the exact row a rogue admin would have to forge to hide their tracks.

Data Subject Access Requests and right-to-erasure surface as first-class admin endpoints. Erasure events ship through the chained audit trail so the act-of-erasure is itself non-repudiable evidence — exactly what GDPR Article 17 and SOC 2 Privacy auditors ask for.

Connector credentials never live on disk in plaintext. Choose the secret store that fits your environment — DPAPI on the host, Azure Key Vault for Azure-native deployments, HashiCorp Vault for non-Azure shops — selected via a single config switch.

Five forwarding paths cover every common SIEM. Splunk, QRadar, ArcSight, Sentinel, Graylog — pick the transport your collector already speaks instead of building a custom pipeline.

Documented STRIDE threat model, SOC 2 Trust Service Criteria mapping, ISO 27001:2022 Annex A gap analysis, and an incident-response runbook structured around NIST SP 800-61 — answers the auditor questions before they ask.

Run the Admin portal under Windows Integrated Authentication for domain-joined deployments, Entra ID MSAL for cloud-native, or both at once — the SmartAuth scheme routes per request based on the credential type the browser presents.

Privileged checkout, rotation, and tamper-evident audit built into the platform you already deploy for synchronization. Stop buying PAM as a second product.

Owner-managed Active Directory and Entra ID groups. Users create groups within policy, others request to join, owners approve, and the mesh provisions the result through the connectors you already run.

Analyze a Microsoft Identity Manager export before you commit. The analyzer gives a verdict with reasons, proposes connectors and flows with evidence, and saves the plan as a migration project in the Admin Portal.

Build your own connector on the packaged SDK the bundled connectors use. It carries the connector contract, retry and change-ordering helpers, composite keys, watermarks, and export routing, with a Visual Studio sample solution to start from.