Federate Visylix with Okta, Azure AD, Google Workspace, Auth0, OneLogin, or Keycloak. SAML 2.0 and OIDC, JIT provisioning, group-based RBAC, and audit-logged logins , setup in 15 minutes.
Works with every major identity provider
VMS access is one of the most sensitive credentials in your organization. Treat it like it is.
Without SSO, removing someone from a VMS means an admin hunts through manual user lists. With SSO + group-based RBAC, deprovisioning in your IdP instantly revokes VMS access across all sites. One source of truth.
Surveillance passwords get shared, written on sticky notes, and reused. SSO pipes all access through your IdP, where MFA, conditional access policies, and anomaly detection already protect other critical systems. Zero new password surface area.
SOC 2 auditors, ISO 27001 auditors, and insurance carriers all ask the same question: can you prove who accessed what camera and when? Visylix SSO logs are signed, tamper-evident, and stream to your SIEM. Audit answered.
Enterprise SSO features that map to real SOC 2, ISO 27001, and HIPAA audit requirements.
Industry-standard federation. SAML 2.0 for traditional enterprise IdPs, OpenID Connect for modern identity. Both work with the same admin console, pick whichever your IdP supports.
Paste your IdP metadata URL. Visylix fetches and validates the signing certificate, entity ID, and SSO endpoints automatically. No XML editing, no certificate uploads for most providers.
Map IdP groups (or roles claim) to Visylix roles. Users in the "Security-Operators" group get the operator role on every login. Remove from group → access revoked on next sign-in.
New user signs in via SSO for the first time? Their Visylix account is created automatically with the right role based on IdP group membership. No manual user setup, no SCIM sync required.
Every SSO login logged with assertion ID, IdP, source IP, role assignment. Streamed to your SIEM (Splunk, Datadog, Elastic) via webhook or syslog. Required for SOC 2, ISO 27001, HIPAA audits.
Local admin account preserved for IdP outage scenarios. Break-glass logins trigger immediate SOC alerts and leave a heavily audited trail. Enforce SSO-only for all other users.
Four steps, one admin console, zero XML editing.
From Okta, Azure AD, Google Workspace, or any SAML 2.0 / OIDC provider. Visylix fetches certs and endpoints automatically.
Drag-and-drop mapper. "Security-Operators" → operator role, "Security-Admins" → admin role. Add custom roles as needed.
Visylix runs an end-to-end SAML/OIDC assertion test. You see exactly which claims arrived and which role was assigned.
Flip the switch to disable password login. Break-glass admin preserved. Existing users prompted to sign in via IdP on next session.
Regional retail chain, 140 stores, 2,800 cameras. IdP: Okta. Migration from manual user management to Visylix SSO completed in one afternoon.
SSO is included on Scale and Enterprise. Start a free trial today, your IdP admin will thank you.