Sign‑on policies and multi‑factor
Decide what each app asks for: a passkey, a second factor, a trusted network or a recent sign-in.
One policy, read from the top
Write the rules once and share them across apps: who, from where, and what they're asked for. The first rule that matches decides.
Check before you rely on it
Pick a person and an app and see whether they'd get in, and which rule decided. You find the gap before someone tells you they're locked out.
Passkeys where they matter
Ask for a passkey on an app and it's the only option offered there. Authenticator apps and recovery codes cover everyone else, and any password still in use is checked against known breaches.
Give everyone their own key.
Single sign-on, passkeys and logs are on the free plan. Tell us about your team and we'll get you started.