Product Guide

Enterprise Access Governance Platform

Why Verge Auth is different. Not just authentication—a complete identity and access governance platform with intelligent automation, deep security, and seamless integration.

🔐 Core Product: Authentication

Enterprise-grade authentication with flexible options for every use case.

🔐

Single Sign-On (SSO)

One login for all your applications. Seamless access across your entire ecosystem.

Unified login experience
Reduced password fatigue
Faster user onboarding
Centralized session management

🛡️

Multi-Factor Authentication (MFA)

Layered security with TOTP, SMS, and backup codes. Protect against credential theft.

Multiple authentication methods
Configurable enforcement policies
Backup code recovery
Per-user MFA control

⏱️

Session Management

Intelligent session control with configurable timeouts and instant revocation.

Idle timeout configuration
Absolute session expiry
One-click session revocation
Multi-device session visibility

🔗

OAuth 2.0 / OIDC

Google Workspace integration
Microsoft Entra ID support
Generic OIDC providers
Social login options

🏢

SAML 2.0 Enterprise SSO

Integrate with Active Directory, Okta, and enterprise identity providers.

ADFS integration
Okta, OneLogin support
Enterprise federation
Compliance-ready

✨

Passwordless Authentication

Eliminate passwords with magic links and OTP. Frictionless, secure access.

Magic link authentication
One-time password (OTP)
No password management overhead
Reduced phishing risk

🎛 Differentiator: Permission Automation

Killer Differentiator: Automatic route-based permission generation. No manual permission mapping required.

How Automatic Permission Sync Works

Your Application

→

Verge Auth Detects

→

Permissions Aligned

→

Ready for Assignment

🛣️

Route Discovery

Every API route automatically becomes a permission. No manual mapping required.

Zero manual configuration
Always in sync with code
Automatic permission creation
Seamless integration

🔄

Permission Sync

Permissions remain continuously aligned with your application structure.

Continuous alignment
Instant permission updates
No dashboard manual entry
Always up-to-date

🎯

Service-Aware Access Control

Permissions are scoped to services. HRMS permissions don’t affect ITSM.

Service-level isolation
Clear permission boundaries
Multi-service support
No permission leakage

👥

Group-to-Role Inheritance

Assign roles to groups. All group members inherit permissions automatically.

Bulk permission management
Consistent access control
Easy onboarding
Simplified auditing

Feature	Verge Auth	Traditional IAM
Route Discovery	✓ Automatic via SDK	✗ Manual entry
Permission Sync	✓ Real-time	✗ Manual updates
Service Isolation	✓ Built-in	✗ Complex setup
Group Inheritance	✓ Native	✗ Limited support

🎯 Why Teams Choose Verge Auth

See how Verge Auth compares to traditional permission management approaches.

Traditional Approach	Verge Auth
Create permissions manually	✓ Permissions discovered automatically
Maintain permission catalog	✓ Sync from application
Update permissions after every release	✓ Routes synchronized automatically
Multiple admin consoles	✓ Centralized governance
Manual role assignment	✓ Group-to-role inheritance
Permission drift over time	✓ Always in sync with code

🧠 Differentiator: Governance & Audit

Intelligent risk scoring and security monitoring. Know what’s happening in real-time.

🧠

Intelligent Risk Scoring

Every action is scored 0-100 based on multiple risk factors. High-risk events are flagged.

Failed login analysis
New IP detection
Suspicious action tracking
Time-based risk assessment

🚨

Suspicious Activity Detection

Automatic detection of anomalous behavior. Get alerted before incidents escalate.

Real-time anomaly detection
Pattern recognition
Instant security alerts
Automated flagging

📊

Activity Heatmaps

Visual representation of user activity over time. Identify patterns at a glance.

30-day activity visualization
Color-coded intensity
Hover for details
Trend identification

📈

Login Analytics

Track login trends, failed attempts, and authentication patterns.

7-day login trends
Failed login tracking
Geographic analysis
Device intelligence

🔔

Security Alerts

Real-time notifications for high-risk events. Stay informed instantly.

Risk score ≥ 70 alerts
Dashboard notification bell
Event details included
Timestamp tracking

🔒

Sensitive Data Sanitization

Automatic redaction of passwords, tokens, and PII from audit logs.

Password redaction
Token masking
PII protection
GDPR compliant

🎯 Risk Scoring

Risk scoring is calculated using multiple behavioral and security signals

📊 Dashboard Analytics

Role distribution, risk trends, action statistics, recent activity feed

🔍 Export & Compliance

CSV export for audits, UTC timestamps, configurable IP logging

🏢 Enterprise Features

Built for multi-tenant SaaS with enterprise-grade security and compliance.

🏢

Multi-Tenancy

Complete data and permission isolation between tenants. No cross-tenant leakage.

Strong tenant isolation
Permission boundaries
Separate configurations
Audit trail separation

📋

Service Registry

Centralized service management with health monitoring and automatic route sync.

Service registration
Health monitoring
Automatic route discovery
Service-level analytics

📊

Compliance Evidence & Audit Reporting

Generate comprehensive audit evidence for compliance requirements with automated data collection.

Audit log export
Compliance-ready data
PII protection
UTC timestamps

�

Hierarchical Roles

PLATFORM_OWNER, SUPER_ADMIN, ADMIN. Clear access levels with scoped permissions.

PLATFORM_OWNER: Full access
SUPER_ADMIN: Organization admin
ADMIN: Tenant admin
Custom roles supported

📦 Application Integration

SDK-first approach with automatic route sync and JWT security. Integrate in minutes.

Install SDK

pip install verge-auth-sdk

Initialize

add_central_auth(app)

Configure

Set environment variables

Sync Routes

Auto-generate permissions

Deploy

Go live with auth

�

SDK Integration

Lightweight Python SDK for FastAPI, Django, Flask. One line to enable auth.

pip install verge-auth-sdk
add_central_auth(app)
Zero gateway architecture
Automatic middleware

🔑

Secrets Management

Generate Client ID, Client Secret, and Service Secret. Rotate without downtime.

One-time secret generation
Email delivery
Secret rotation
Audit trail

🔐

Enterprise Token Security

Industry-standard cryptographic verification with automatic key rotation.

Standard protocols
Automatic key rotation
No secret sharing
Compliance-ready

🍪

HttpOnly Cookie Security

Secure cookie-based sessions. JavaScript cannot access tokens.

HttpOnly flag
SameSite protection
Secure flag (HTTPS)
XSS protection

☁️ Platform Roadmap: Cloud Governance

Unique Differentiator: Most IAM platforms don’t offer this. Cloud cost visibility and optimization.

☁️

Cloud Cost Visibility

Unified cost explorer across AWS, Azure, GCP, and Oracle Cloud.

Multi-cloud aggregation
Cost breakdown by service
Trend analysis
Budget tracking

🔧

Resource Management

View and manage EC2, Lightsail, RDS, S3 resources from one dashboard.

Unified resource view
Resource inventory
Status monitoring
Quick actions

🤖

Cost Optimization

Intelligent cost optimization suggestions based on usage patterns.

Right-sizing recommendations
Idle resource detection
Reserved instance suggestions
Savings opportunities

Feature	Verge Auth	Competitors
Cloud Cost Visibility	✓ Built-in	✗ Not available
Multi-Cloud Support	✓ AWS, Azure, GCP, Oracle	✗ Limited
Cost Optimization	✓ Native	✗ Not available
Resource Management	✓ Unified	✗ Separate tools

🎫 Platform Roadmap: ITSM & CRM

Expand beyond identity. Integrate with ServiceNow, Jira, Zendesk, and CRM systems.

🎫

ServiceNow Integration

Seamless integration with ServiceNow for IT service management.

Incident management
Change management
User provisioning
Automated workflows

📋

Jira Integration

Connect with Jira for project management and issue tracking.

Issue creation
Status updates
User mapping
Workflow automation

💬

Zendesk Integration

Integrate with Zendesk for customer support and ticket management.

Ticket synchronization
User context
Support automation
SLA tracking

👤

CRM Integrations

Connect with Salesforce, HubSpot, and other CRM platforms.

Contact synchronization
Lead management
Sales automation
Data consistency

🔄 Automated Workflows

Trigger actions in ITSM systems based on IAM events

👥 Unified User Directory

Single source of truth across all enterprise systems

📊 Cross-System Analytics

Gain insights across ITSM, CRM, and IAM data

❓ Enterprise FAQ

Answers to common questions from enterprise security architects and platform engineers evaluating Verge Auth.

How does Verge Auth handle API versioning?

Verge Auth treats API versions as independent routes. During synchronization, each versioned endpoint is discovered and managed as a separate permission, allowing organizations to maintain access policies independently across API versions.

Example:
hrms-service:/api/v1/employees:get  → Separate permission
hrms-service:/api/v2/employees:get  → Separate permission

Organizations can assign different access policies to v1 and v2 independently.

What happens when routes are deprecated or removed?

During route synchronization, removed endpoints are soft-deleted rather than permanently removed. This preserves auditability while ensuring obsolete permissions don’t remain active. Administrators receive:

Visual indication: Removed routes display with strikethrough in permission selection UI
Dashboard notifications: In-app alerts when routes are removed during sync
Email notifications: Automatic email alerts sent to admins with full route details
Audit trail: Complete historical record preserved for compliance

Enterprise Advantage: Unlike homegrown systems that either hard-delete permissions (losing audit trail) or leave them active (security risk), Verge Auth provides visibility, notifications, and clean lifecycle management.

How does permission grouping work?

Verge Auth supports multi-level permission organization:

Service-level grouping: Permissions are automatically organized by service (HRMS, ITSM, CRM)
Role-based grouping: Administrators create roles with collections of permissions
Group-based inheritance: Users inherit permissions through group assignments
Cumulative access: Users receive combined permissions from all assigned roles and groups

Permission Inheritance Flow

Service Routes

→

Permissions

→

Roles

→

Groups

→

Users

Does Verge Auth support permission inheritance?

Yes, permission inheritance is a core feature. Users inherit permissions through:

Group membership: Assign users to groups, groups to roles
Role assignment: Direct role assignment to users
Cumulative model: All inherited permissions combine without conflicts
Dynamic updates: Changing a role’s permissions instantly affects all inherited users

Use Case: Create an “HR Managers” group, assign it the “HR Admin” role. All group members automatically inherit all HR admin permissions. Add a new permission to the role—every group member gets it instantly.

Can Verge Auth scale for large microservice ecosystems?

Verge Auth is designed for enterprise-scale microservice architectures:

Service-centric architecture: Permissions organized by service, not global flat catalog
Independent synchronization: Each service syncs routes independently without blocking others
Optimized synchronization: Route sync is optimized to minimize operational overhead and maintain performance at scale
Service registry: Centralized service management with health monitoring
Multi-tenant isolation: Service permissions scoped to organizations/tenants
Audit logging: All sync events logged for operational visibility

📊 Operational Scale

Designed for large microservice environments

⚡ Performance

Synchronization is optimized to minimize operational overhead and maintain performance at scale

🔍 Visibility

Service-level dashboards show sync status and health

Enterprise Differentiator: Unlike monolithic IAM systems that struggle with microservice complexity, Verge Auth’s service-first design scales naturally with distributed architectures.

How are administrators notified of permission changes?

Verge Auth provides multi-channel notification for route and permission changes:

Dashboard notifications: Real-time in-app alerts with unread count badge
Email notifications: Detailed emails sent to admins when routes are removed
Audit logs: Complete audit trail of all permission changes
Visual indicators: Struck-through UI for inactive/removed permissions

Notification Targeting: Route removal notifications are sent to organization/tenant administrators (PLATFORM_OWNER, SUPER_ADMIN, ADMIN roles) ensuring the right people are informed.

What compliance features does Verge Auth offer?

Verge Auth includes enterprise-grade compliance capabilities:

Compliance evidence: Comprehensive audit data for compliance requirements
Audit export: CSV export of all audit logs for external audits
PII protection: Automatic redaction of sensitive data from logs
Session management: Configurable timeouts and instant revocation
IP logging: Optional IP address logging with privacy controls
UTC timestamps: All events logged in UTC for consistency

Does Verge Auth support ABAC (Attribute-Based Access Control)?

Verge Auth focuses on Authentication + RBAC + Permission Governance. We provide:

Automated permission discovery: Route-based permission generation via SDK
Permission synchronization: Continuous alignment with application structure
Role-based access control: RBAC with group inheritance and service scoping
Access governance: Audit logging, risk scoring, and compliance reporting

Our Positioning: Verge Auth automates permission discovery, synchronization, governance, and role management across applications. Business-specific authorization rules (e.g., department-based access, manager hierarchy) continue to be enforced by the application according to domain requirements. For complex ABAC scenarios requiring policy engines, we recommend integrating specialized solutions like OPA alongside Verge Auth.

🆘 Support & Onboarding

Our team provides hands-on onboarding and integration support to help you go live quickly and securely with Verge Auth.

🌐 Website: https://www.vergeinfosoft.com
📧 Email: contactus@vergeinfosoft.com