All apps

CITADEL Auth Identity

Who can get into which app, and who did what?

Auth gives your people one sign-in for every CITADEL app you use, with passkeys or an authenticator app as the second step. Add, change or deactivate a person once and every app hears about it, and every sign-in and change is kept in an audit trail.

[email protected] (Maya Okafor) Sign out

Select Application

Organization

Corantic Services (Primary)

  • Contracts Proposals, contracts and e‑signature
  • Engage Client engagement and work tracking
  • Events Events, registrations and check-in
  • Invoice Invoicing, payments and reminders
  • Scope Presales estimates and delivery plans
  • Support Tickets, SLAs and the customer portal
  • Time Timesheets, approvals and utilization
Sample data.

What Auth covers

One sign-in

One account and one front door for the whole suite.

  • One account for every CITADEL app your organization uses
  • A launcher that shows only your organization's apps, with a picker for people in several organizations
  • Sign out once, signed out of every app
  • A sign-in page with your logo, name and colors

Strong sign-in for each person

A second step that people will actually use.

  • Passkeys, as a second step or to sign in with no password at all
  • Authenticator-app codes, with one-time backup codes
  • Password reset by email; new people set their own password from an invitation
  • Each person sees their active sessions and can end any of them

Account protection

Guards that work without anyone watching.

  • Accounts lock after repeated failed passwords
  • Password rules, and automatic sign-out after inactivity
  • Stolen sign-in credentials are detected when reused, and cut off
  • An organization can never lose its last owner
  • Stored secrets are encrypted

People kept in step across apps

One identity for each person, wherever they work.

  • Owner, admin and member roles for each organization
  • People invited in any app are set up to sign in automatically
  • Name, email and deactivation changes reach every connected app
  • Removing someone from one app ends their access there; the account closes when no app still uses it

In practice

Offboarding in one place

Deactivate a person once and every connected app hears about it. Deliveries that fail are retried, and none go missing quietly.

An audit trail your admins can read

Every sign-in, second step, membership and settings change is recorded with the time and the outcome. Your organization's admins see their own audit log.

Your brand at the door

The sign-in page carries the logo and colors of the organization people are signing in to.

Email from your own mailbox

Invitations and password resets can come from your Microsoft 365, Google Workspace or other mailbox.

At a glance

Auth works on its own, and connects to the other CITADEL apps you use.

Sign-in
One account for every CITADEL app you use
Second step
Passkeys, authenticator app or backup codes
Sign-out
Sign out once, signed out of every app
Offboarding
Deactivate once, every app hears about it
Roles
Owner, admin and member for each organization
Audit
Every sign-in and change, viewable by your admins

See Auth with your own way of working.

Tell us how your team works today. We'll walk through Auth using sample data shaped like your business, and show how it connects to the other apps if you use them.

Book a walkthrough