Identity and access for people and AI hosts

One entry. The right workspace. The right authority.

Changing an AI host, opening the Workbench, or moving from a personal view into team work should not mean rebuilding your business identity. One Auth establishes the authenticated person and the organization/workspace they are acting in.

Get started with One Auth Understand host authorization

An identity journey that understands work

Sign up and sign in

Enter through supported authentication methods without inventing a new identity per tool.

Tenant and workspace resolution

Determine which organization, workspace, and environment the session belongs to.

Consent and grants

See when a connected client requests access and which scopes may be granted or withdrawn.

Sessions and clients

Understand authorized sessions and applications, subject to the connected identity service and current product configuration.

Host-aware access

Associate an external host with the authenticated workspace while preserving host-specific limitations.

One Access Console

For authorized operators, a specialized console organizes host inventory, capability-by-host matrices, grants, discovery state, publications, and activity. A matrix makes differences legible: connected, shared, available, approval required, missing authentication, denied, expired, revoked, unsupported, and configuration required are not interchangeable.

Discovery does not grant execution

Being able to see that a tool exists is different from having permission to read a resource or perform a mutation. One Access helps make those boundaries explicit.

Continue with context

Move from understanding to the right next step.

Get started with One Auth Understand host authorization