Cette page se concentre sur la prise en charge du protocole OpenID Connect par Memority. Vous cherchez les fonctionnalités (C)IAM de Memority comme MFA, SSO et gestion des utilisateurs ? Voir Memority sur le benchmark des fournisseurs d'identité (C)IAM.

Memority Fournisseur OpenID Connect

French identity and access management vendor offering the Memority Identity Factory, a SaaS platform unifying identity governance and administration (IGA), SSO and federation, multi-factor authentication, and customer identity (CIAM) for employees, partners, customers, IoT, and non-human identities such as service accounts and AI agents. The platform is split into MY-Identity (lifecycle and rights governance), MY-Access (SSO and federation via SAML 2.0, WS-Federation, OAuth 2.0, and OpenID Connect, with risk-based adaptive authentication), MY-Keys (second-factor management: TOTP, WebAuthn/FIDO2, push, X.509), and MY-Discovery (shadow SaaS and ghost account discovery). Extensible through Groovy rules and actions and OAuth2-protected REST APIs. Hosted in Europe (Paris or Dublin) on AWS, S3NS (SecNumCloud 3.2), or GCP; ISO 27001 and ISO 27701 certified, with NIS2 and DORA compliance support. Pricing is quote-based.

Foire aux questions

Memority prend-il en charge Authorization Code grant type ?

Memority prend en charge Authorization Code grant type. The Authorization Code flow is an optional authorized flow per federation (enabled by default). En savoir plus

Memority prend-il en charge Refresh Token grant type ?

Memority prend en charge Refresh Token grant type. Refresh tokens are enabled per tenant (default validity 7 days) and per federation. En savoir plus

Memority prend-il en charge Client Credentials grant type ?

Memority prend en charge Client Credentials grant type. The Client Credentials flow is supported, notably for non-human identities calling Memority APIs. En savoir plus

Memority prend-il en charge Implicit grant type ?

Memority prend en charge Implicit grant type. The Implicit flow is an optional authorized flow per federation (enabled by default). En savoir plus

Memority prend-il en charge Device Authorization Grant grant type ?

Memority prend en charge Device Authorization Grant grant type. The Device Authorization Grant is supported, with a configurable user code (default 8 characters, 6 to 20, with a configurable alphabet). En savoir plus

Memority prend-il en charge JWT Bearer Token grant type ?

Memority prend en charge JWT Bearer Token grant type. The JWT Bearer flow is an optional authorized flow per federation. En savoir plus

Memority prend-il en charge Resource Owner Password Credentials grant type ?

Memority prend en charge Resource Owner Password Credentials grant type. The Resource Owner Password Credentials flow is an optional authorized flow per federation. En savoir plus

Memority prend-il en charge Authorization Endpoint endpoint ?

Memority prend en charge Authorization Endpoint endpoint. The authorization endpoint is part of the OAuth2/OpenID Connect federation; endpoints are displayed from the federation form. En savoir plus

Memority prend-il en charge Token Endpoint endpoint ?

Memority prend en charge Token Endpoint endpoint. A token endpoint serves access tokens (for example the client credentials flow at the tenant SSO path under /access_token). En savoir plus

Memority prend-il en charge Device Authorization Endpoint endpoint ?

Memority prend en charge Device Authorization Endpoint endpoint. Supported as part of the Device Authorization Grant. En savoir plus

Memority prend-il en charge none méthode d'authentification du token endpoint ?

Memority prend en charge none méthode d'authentification du token endpoint. Federations can be declared as Public clients, which have no client secret. En savoir plus

Memority prend-il en charge RP-initiated Logout fonctionnalité ?

Memority prend en charge RP-initiated Logout fonctionnalité. Federations declare authorized post-logout redirect URIs, and the id_token_hint can be verified against the client's JWKS URL. En savoir plus