Centralized Identity & Access Management
SIMS authenticates your users — with passwords or Passkeys — and issues short-lived JWTs that every Consumer App validates locally. Your applications never touch credentials, and users sign in once, everywhere.
{
"sub": "alice",
"org_id": 42,
"permissions": ["loan.approve", "user.view"],
"scope": "OWN_AREA",
"exp": 1786150800
}Consumer Apps verify the signature locally — no round-trip to SIMS.
Authentication, authorization, and audit — in one platform.
Biometric sign-in via WebAuthn Passkeys, plus classic passwords. SIMS never sees biometric data — only a signed challenge.
One user, many Organizations with independent roles and permissions — and a hierarchical Office tree controlling data visibility.
Fine-grained permissions like loan.approve bundled into Roles, plus data Scopes from GLOBAL down to OWN_BRANCH.
Every authentication, permission check, and administrative change is recorded — who, what, when, and in which Organization.
JWTs (15 min default) refreshed by long-lived, revocable Refresh Tokens. Logout, password change, or admin action kills them instantly.
LMS, CRM, or any other app validates tokens locally and never handles credentials. Integrate with one signing key and an API reference.
A user signs in to SIMS with a Passkey or password. SIMS owns the full ceremony — credentials never leave the platform.
SIMS issues a short-lived Access Token carrying the user's identity, Organization, Permissions, and Scope — plus a Refresh Token.
Consumer Apps check the token signature locally and enforce Permissions and Scope. No SIMS call, no shared secrets, no credential handling.
Manage users, roles, and permissions from the admin portal, or browse the full API reference.