Interactive demo

SHT 02 PIAM Suite - specification

The full identity platform.

One golden record from HR to door reader. Physical and logical access, joiners to leavers, audit-ready by default.

Watch it run Browse modules

01 What PIAM is

The identity broker between HR and the door.

Not an access control system. Not an IdP. Not a visitor book. The piece that sits between all of them and makes the decisions consistent.

Your HR system knows who works for you. Your IdP knows who logs in. Your access controllers know which cards worked this morning. None of them know the whole story - who this person is, what they are allowed to do today, and why.

PIAM is the brain that joins them up. It listens to HR for the ground truth, reconciles identities across payroll and IdP and directory, writes the access policy to every controller, issues and revokes credentials, and keeps a single audit trail that you - or a regulator - can query in one place.

02 The schematic

One engine between sources and targets.

Fig 02.1 - the broker: every source reconciled into one engine, written out to every target.
< 4 MIN
HR recordDoor reader
15 MIN SLA
SourceDirectory
< 6 S
Policy writeDoor controller

03 Capabilities

Six pillars. One install.

Broker

Identity broker

The single source of truth. One record, reconciled from HR, AD, and card systems. Collision detection and conflict resolution built in.

Policy

Policy engine

Role-, location-, and time-based access policies applied everywhere in seconds. Write once, enforce across every reader and app.

Lifecycle

Lifecycle automation

Joiner, mover, leaver - no tickets, no delays, no drift. HR record to issued badge in under 4 minutes.

Audit

Full audit trail

Every grant, revoke, and door event. Regulator-ready lineage in one timeline. Export to SIEM, GRC, or CSV in one click.

Connectors

148+ connectors

Nedap, Genetec, Honeywell, Oracle HCM, Workday, SAP, AD, Entra, Okta - already wired.

Sovereign

EU sovereign

eu-west-2, eu-central-1, EUSC. ISO 9001, ISO/IEC 27001, TISAX, GDPR / NIS2 / DORA support. Data never leaves European jurisdiction.

04 Scale

Production numbers.

Active identities 2.4M
Joiner to badge < 4 min
SaaS uptime 99.999%
Pre-built connectors 148+
Certifications ISO 9001
ISO/IEC 27001
TISAX · GDPR / NIS2 / DORA

Certified to ISO 9001, ISO/IEC 27001 and TISAX (DEKRA-certified), with GDPR / NIS2 / DORA support.

05 What you get

Out of the box.

  • Golden record - reconciliation across HR, directory, and PACS. No middleware to build.

  • Access reviews - dashboards for access reviews, certification campaigns, and segregation-of-duties.

  • Manager & user portal - self-service for managers, contractors, and end-users.

  • Native mobile credentials - Apple Wallet, Google Wallet, FIDO2 - out of the box.

  • Visitor management - host notifications and auto-expiring credentials, lobby-friendly.

  • Audit export - to Splunk, Elastic, Sentinel, ServiceNow.

  • 24/7 enterprise support - 15-min P1 response SLA.

06 Integrations

Speaks your estate's language.

HR
WorkdaySAP SuccessFactorsBambooHRPersonioHiBob
IdP & directory
SCIM 2.0Entra IDOktaPingOpenLDAPActive DirectoryOIDCSAML
PACS
LenelS2AEOS (Nedap)GenetecHoneywellBoschdormakabaSALTO
Lifts
KONEOtisSchindler
Video
MilestoneAxisBosch video
Time & attendance
Kaba Exos T&AATOSSInterflex
Mobile credentials
HID Origo

All product names, logos and brands are property of their respective owners. Integration and connector names are used for identification purposes only and do not imply endorsement.

07 Related sheets

The rest of the drawing set.

SHT 03 Access Management Every door, every policy SHT 04 Credential Management Cards to mobile SHT 05 Visitor Management Lobby to exit SHT 06 Cards & Credentials The badge is a secret

See the suite live.

Every scenario in our interactive demo exercises the Suite live - HR record to issued credential to door reader to audit export.

Launch interactive demo Book a briefing