Identity
Clear authority. Mandatory verification.
xOps centralises identity to protect tenant sovereignty and maintain consistent access control across every expression.
Identity and Authentication
- Identity defines who exists and remains globally stable.
- Authentication proves presence and is time-bound evidence.
- Separation preserves authority clarity across tenants.
Mandatory MFA
- TOTP, WebAuthn security keys, and passkeys are supported.
- Single-factor authentication is not permitted.
- Higher-risk actions can require step-up verification.
Tenant-Scoped Sessions
- Each session includes identity, tenant context, assurance, and expiration.
- Authentication does not grant cross-tenant visibility.
- Identity may be global, authority is always scoped.
Delegation and Audit
- Support delegation is explicit and time-bounded.
- Impersonation is declared and fully attributed.
- Boundary services like
id.xops.auandgo.xops.auare centralised for consistency.