Enterprise-Grade Identity Synchronization

Process only what changed with watermark-based change detection — uSNChanged for Active Directory, configurable delta columns for SQL databases, and SHA-256 file hash for CSV/TXT files.

Seamlessly sync identities in both directions with conflict resolution and authoritative source management.

Define attribute mappings, transformations, and business rules with a safe transform engine — no eval, no arbitrary code execution.

Complete audit trails with before/after values, run history per connector, and a UI-based audit viewer for all identity changes.

Every audit row is hash-chained with SHA-256 — a single broken link signals post-hoc tampering. One-click chain integrity verification surfaces the exact row a rogue admin would have to forge to hide their tracks.

Data Subject Access Requests and right-to-erasure surface as first-class admin endpoints. Erasure events ship through the chained audit trail so the act-of-erasure is itself non-repudiable evidence — exactly what GDPR Article 17 and SOC 2 Privacy auditors ask for.

Connector credentials never live on disk in plaintext. Choose the secret store that fits your environment — DPAPI on the host, Azure Key Vault for Azure-native deployments, HashiCorp Vault for non-Azure shops — selected via a single config switch.

Five forwarding paths cover every common SIEM. Splunk, QRadar, ArcSight, Sentinel, Graylog — pick the transport your collector already speaks instead of building a custom pipeline.

Documented STRIDE threat model, SOC 2 Trust Service Criteria mapping, ISO 27001:2022 Annex A gap analysis, and an incident-response runbook structured around NIST SP 800-61 — answers the auditor questions before they ask.

Run the Admin portal under Windows Integrated Authentication for domain-joined deployments, Entra ID MSAL for cloud-native, or both at once — the SmartAuth scheme routes per request based on the credential type the browser presents.