Skip to main content

Identities

An identity in Ciyora Fortress is a person or a non-human actor that holds access.

People​

  • Source. People come from your authoritative HR connector, with department, manager, title and employment dates.
  • Accounts. Accounts come from directories, identity providers, cloud providers and applications. Fortress matches accounts to people. Accounts it cannot match are orphans; likely duplicates are grouped for review.
  • Entitlements. Roles, groups and permissions an account holds in a connected system. The identity page shows them as a list and as an access graph.
  • Lifecycle. Joiner, mover and leaver events from the HR source drive birthright access on day one and removal when someone leaves.
  • Risk. Each identity has a risk score, used to order reviews and filter lists.

Non-human identities​

Non-human identities are service accounts, API tokens, keys, certificates and workload identities. Each one should have an owner, a rotation schedule and an expiry. Fortress shows hygiene issues such as no owner, rotation overdue, never expiring or a review needed.

Identity threats​

Fortress raises identity threats from sign-in events and behaviour, such as sign-ins from an unexpected location. Each threat has a MITRE ATT&CK mapping, evidence and response options. See Detections, alerts and incidents.