Access Control
Identity & Access Management​
Definity maintains formal access-control processes designed to ensure that systems and information are accessible only to authorized users and personnel.
Access is granted based on business requirements and is designed around the principle of least privilege.
Authentication​
Definity supports layered authentication controls, including:
- Multi-factor authentication
- SSO
- Password security controls
- Authorization controls
- Role-based permissions
These controls help reduce the risk associated with compromised credentials and unauthorized access.
Access Lifecycle​
Access is managed throughout the user lifecycle, including:
- Onboarding
- Role changes
- Provisioning
- Periodic access reviews
- Offboarding
Access is provisioned based on authorized requests and business responsibilities.
When access is no longer required, it is removed through defined deprovisioning processes.
Privileged Access​
Privileged access to sensitive systems is restricted to defined roles and subject to additional authorization and review.
Elevated permissions are limited to personnel who require them for their responsibilities, helping reduce the potential impact of compromised accounts or unauthorized activity.