Let staff sign in to Visylix with the accounts they already have: Okta, Entra ID, Google Workspace, Auth0, OneLogin, Keycloak, Active Directory or LDAP. Accounts are created on first sign-in, groups become roles, and every sign-in is recorded. Set up from Settings.
Works with every major identity provider
Access to your cameras is one of the most sensitive things in your organisation. Treat it that way.
Without SSO, removing a leaver means hunting through user lists. With SSO, removing them from your directory removes their Visylix access at every site. One source of truth.
Surveillance passwords get shared, written down and reused. SSO sends every sign-in through your identity provider, where MFA and access policies already protect your other critical systems. No new passwords at all.
Auditors and insurers all ask the same question: can you prove who accessed which camera, and when? Visylix records the person, time and source of every action in a tamper-evident trail and streams it to your SIEM.
Enterprise single sign-on, engineered for the frameworks our buyers are audited against.
The two standard ways to sign on. SAML 2.0 for established enterprise identity providers, OpenID Connect for modern ones, plus Active Directory and LDAP. Pick whichever you use.
Paste a few details from your identity provider into Settings and Visylix does the rest. No configuration files to edit.
Map your directory groups to Visylix roles. Everyone in "Security-Operators" gets the operator role at every sign-in. Remove someone from the group and their access goes with it.
The first time someone signs in, their Visylix account is created with the right role from their group membership. No manual set-up and no user lists to sync.
Roles refresh at every sign-in, and every action is recorded in the tamper-evident audit trail, ready to stream to Splunk, Datadog or any SIEM.
One emergency local administrator stays available if your identity provider is down. SSO users have no local password at all.
Four steps, one settings screen, no configuration files.
From Okta, Entra ID, Google Workspace or any SAML 2.0 or OIDC provider, or point Visylix at Active Directory or LDAP.
A simple map in Settings: "Security-Operators" to operator, "Security-Admins" to admin, across the four built-in roles.
Run the built-in configuration test in Settings, then have one person sign in to confirm their role.
Staff sign in only through your identity provider, with one emergency administrator kept in reserve.
A multi-store retailer on Okta maps its groups to Visylix roles and moves from manual user lists to single sign-on in an afternoon.
SSO is included on Enterprise. Start a free trial today, your IdP admin will thank you.
Any identity provider that supports SAML 2.0 or OpenID Connect (OIDC), the two standard sign-on protocols, including Okta, Entra ID, Google Workspace, Auth0, OneLogin and Keycloak. Visylix also signs people in directly against Active Directory or LDAP, set up from Settings.
Most teams go from first click to staff signing in with SSO in under 15 minutes. Paste a few details from your identity provider into Settings, map your groups to admin, operator or viewer, and Visylix creates each account automatically the first time someone signs in. No manual user lists to keep in sync.
Yes. People created through SSO have no local password, so they can only sign in through your identity provider. One emergency local administrator account is kept for the day your identity provider or directory is down.
When someone signs in, Visylix reads their group membership from your identity provider and gives them the matching role. Someone in "Security-Operators" becomes an operator. Roles refresh at every sign-in, so removing someone from a group removes their access the next time they try.
Yes. Every sign-in refreshes the user's role, and administrative actions are recorded in the tamper-evident audit trail. Records are kept as long as your policy says and can be streamed to Splunk, Datadog, Elastic, QRadar or any SIEM that accepts web events, which is exactly what auditors ask to see.