IAM
System Mode only — System administrators manage platform-wide administrator accounts and domains, security policies, and sessions, and review IAM events.
Launching the IAM app from the desktop shows a left sidebar organized into four groups.
| Group | Screens |
|---|---|
| (top) | Home — dashboard of domain status, authentication, users, and recent events |
| Administration | System administrators · Domains |
| Security policies | Login · Token · MFA · Session policies |
| Sessions | Active sessions |
| Monitoring | Event logs |
Access Required
System Mode IAM requires system administrator (System Admin) privileges. Regular domain administrators cannot access it.
Engineering mode · System Domain
A SysAdmin enters engineering mode by typing system in the domain field on the login screen. SysAdmin is a domain-independent Global-scope administrator that belongs to the System Domain mapped to the master realm. Authentication policies (login, token, MFA, session) for SysAdmin accounts are managed in this domain's IAM, and the System Domain itself cannot be edited or deleted.
Key tasks
- Manage administrators & domains — create and delete system administrator accounts, and create platform domains (tenants).
- Configure security policies — set password/account lockout (Login), token lifetime (Token), MFA enforcement/methods (MFA), and session (Session) policies as platform defaults.
- Sessions & audit — view and terminate active sessions, and review IAM event logs.