Enterprise access control for your control platform.
Single sign-on with your directory, MFA, and one permission engine for personas, deny rules, field-level security and segregation of duties. Access reviews, break-glass and analytics are included, so the GRC platform passes its own audit.
| Persona | Screens | Risk level | Users |
|---|---|---|---|
| CISO | 48 | Critical | 2 |
| Risk Team Member | 37 | High | 6 |
| Control Owner | 14 | Medium | 21 |
| Auditor (custom) | 9 | Low | 3 |
| Requestor | 1 | Low | 140 |
Illustration with sample data
What Identity, SSO & Access Governance does
Connect on-premises Active Directory, AWS Managed Microsoft AD, Microsoft Entra ID, any OpenID Connect provider or SAML 2.0. A provider can be activated only after a test connection and a test authentication both pass on the exact settings, and every applied configuration is versioned for rollback. Users can be provisioned just in time, and directory groups mapped to personas, but neither can ever grant Admin. A protected built-in administrator always signs in locally, and its use alerts the other Admins. RiskVantis' own email-code MFA can apply to everyone, or to privileged users only.
Access is decided by one engine. Twelve system personas plus custom personas carry Allow and Deny permissions, and a deny always wins. Field-level security hides or locks risk fields, in exports and from AI too. Nine shipped segregation-of-duties rules warn on conflicts, and you can add your own warn or block rules. Optional second-Admin approval covers privileged changes, break-glass access is time-boxed, and access reviews and analytics keep permissions lean. Recommendations never act on their own.
Key capabilities
Single sign-on
Active Directory, AWS Managed AD, Microsoft Entra ID, OIDC and SAML 2.0.
Email-code MFA
Optional, required, or required for privileged users, with time-boxed exemptions.
Personas & deny rules
12 system personas plus custom personas; deny always wins.
Field-level security
Editable, read-only or hidden risk fields, enforced in exports and AI.
Segregation of duties
Nine shipped rules plus your own warn or block rules on every change.
Reviews, break-glass & analytics
Periodic access reviews, emergency access and unused-access insights.
The business case.
Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Identity, SSO & Access Governance changes for your programme.
Least privilege, proven
Effective Access explains why anyone can do anything.
SoD on every change
Conflicts are caught when they are created, not at audit.
Consistent everywhere
Screens, APIs, exports and AI all follow the same decision.
Less access admin
SSO, JIT provisioning and group mapping remove manual user management.
Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.
From setup to outcome.
Connect identity
Add and test your directory or identity provider.
Design access
Assign personas, custom permissions and field rules.
Guard
Turn on SoD rules, approvals and MFA.
Review
Run access reviews and act on analytics.
Supports your obligations.
Identity, SSO & Access Governance contributes evidence and coverage to these frameworks and regulations.
Common questions.
Can a directory group make someone an Admin?
No. Group mapping and just-in-time provisioning never grant Admin.
What if our identity provider is down?
Its users are refused rather than silently falling back to a local password. Only a time-boxed fallback set by an Admin allows otherwise.
Are hidden fields hidden from the AI assistant?
Yes. Field-level security applies to screens, exports and AI alike.
Works better together.
Security, Privacy & Data Protection
A dedicated environment for each customer, encryption at rest, a tamper-evident audit log, deny-by-default APIs and data classification that keeps Restricted content…
Learn more →Platform, Security & IntegrationsCollaboration & Delegation
Invite an internal colleague or an external expert to one record, with only the fields and evidence they need and only the permissions you tick, for a limited time.…
Learn more →Platform, Security & IntegrationsNotifications, Workflow & Administration
One notification engine with rules per organisation, a template designer and digests. Workflow configuration is simulated before it changes anything, a setup wizard gets…
Learn more →See Identity, SSO & Access Governance in action.
Book a 30-minute walkthrough tailored to your frameworks, vendors and team.