Enterprise

Identity infrastructure
for your entire organization.

SSO, adaptive MFA, zero-trust access control, and automated provisioning, unified in one platform. Works with your existing stack in under an hour.

Start free trial Talk to sales

99.99%

Uptime SLA

<50ms

Auth latency P99

1hr

Avg. time to deploy

SOC 2

Type II certified

Capabilities

The complete enterprise IAM stack.

Every capability your security team needs, built on zero-trust principles, not bolted on afterward.

Single Sign-On

SAML 2.0 & OIDC

One login across every app. Works with any SAML or OIDC service provider. SCIM 2.0 automates user lifecycle end-to-end, from onboarding to offboarding.

SAML 2.0OIDCSCIM 2.0

Adaptive MFA

Risk-aware enforcement

TOTP, WebAuthn, FIDO2 passkeys, enforced per user, per resource, per risk context. Step-up authentication triggered automatically when anomalies are detected.

WebAuthnFIDO2TOTP

Zero-trust access

ABAC at every request

Every API call and login evaluated against live ABAC policy before any resource is touched. Device posture, geo-velocity, and session risk scored in real time at under 50ms.

ABACGeo-velocityDevice trust

Directory sync

Automated provisioning

SCIM 2.0 sync from Okta, Azure AD, Google Workspace, or any LDAP. Groups, roles, and attributes kept in sync automatically, no manual reconciliation.

SCIM 2.0LDAPAD

Immutable audit logs

MustLog compliance mode

Every event committed atomically with full chain-of-custody. MustLog mode halts the request if the audit write fails, no silent gaps in your compliance record.

SOC 2HIPAAISO 27001

Post-quantum crypto

NIST PQC finalized

CRYSTALS-Kyber and Dilithium for quantum-safe JWT signing and key exchange. Production-ready for organizations preparing for harvest-now-decrypt-later threats.

KyberDilithiumFIPS 140-2

Integrations

Works with your stack.

Native integrations with the tools your team already uses. View all integrations →

Palo Alto Networks

Prisma Access, Cortex XSOAR, Cloud Identity Engine

Okta

SCIM provisioning, inbound federation

Microsoft Azure AD

Directory sync, Conditional Access integration

Splunk

Real-time SIEM event forwarding

Microsoft Sentinel

Security analytics integration

Google Workspace

Directory sync and SSO federation

AWS IAM

Role federation via SAML 2.0

ServiceNow

ITSM ticketing for access requests

Pricing

Transparent. No surprises.

Seat-based pricing with no per-authentication fees and no overage charges. Every plan includes a 14-day free trial.

Starter

^$8

per user / month · annual billing

Up to 500 users
SSO, SAML 2.0 & OIDC
MFA, TOTP & WebAuthn
90-day audit log retention
Standard support
No SCIM provisioning

Start free trial

Enterprise

^$22

per user / month · annual billing

Unlimited users
SSO + SCIM provisioning
All MFA incl. PIV/CAC
Post-quantum JWT signing
Geo-velocity risk engine
1-year audit retention
Palo Alto Networks integration
Priority support + SLA

Start free trial

Defense

Custom

Vetted organizations only

Everything in Enterprise
PIV/CAC defense mode
FIPS 140-2 validated modules
FedRAMP High authorization path
Air-gap & on-prem deployment
ITAR compliance support
ATO documentation package

Request access

What teams say

Trusted by security teams.

"We replaced Okta with passcore in a single weekend. The SCIM sync worked out of the box, and our audit logs are finally something our compliance team actually trusts."

Sarah K.

CISO, enterprise SaaS company · 1,200 employees

"The Palo Alto integration was the deciding factor. Our Prisma Access policies now enforce passcore identity attributes directly, something we couldn't do with our previous IdP."

Marcus T.

Director of Infrastructure Security · 8,000 employees

"MustLog mode gave our compliance team something they'd been asking for for years, an audit trail that's actually guaranteed, not best-effort."

Priya R.

VP Engineering · Healthcare SaaS

"Post-quantum JWT signing in production. I didn't think we'd get there until 2027. passcore had us live in a quarter."

James L.

Principal Security Architect · Financial services

Identity infrastructurefor your entire organization.