Identity & Access Management
Authentication, authorization, and access control
Tiquo uses identity and access controls to protect logins, sessions, and devices.
Authentication & identity security
The sections below cover staff and customer authentication.
Staff authentication
Staff authentication includes:
| Feature | Description |
|---|---|
| SSO Support | OAuth, SAML, and OIDC integration |
| Multi-Factor Authentication | Required for sensitive operations |
| Device Tracking | Monitor and manage logged-in devices |
| Session Revocation | Instantly revoke suspicious sessions |
| Role-Based Access | Custom roles and granular permissions |
| Audit Logs | Complete record of all staff actions |
| Password Standards | NIST 800-63B compliant |
Customer authentication
Customer authentication includes:
| Feature | Description |
|---|---|
| Passwordless OTP | One-time password login via email |
| OIDC/OAuth IDP | Standards-based identity provider |
| Session Management | Secure token-based sessions |
Access controls cover security, auditing, and compliance for both teams and customers.
Identity protection & account hardening
Credential stuffing protection
| Protection | Description |
|---|---|
| New device verification | Signing in from a new device always requires two-factor verification |
| Automatic OTP | If MFA isn't set up yet, Tiquo automatically sends an OTP to verify identity |
Sensitive action reverification
Tiquo enforces reverification for all sensitive actions:
Users must re-authenticate before making changes such as:
- Adding a new email address
- Modifying critical security settings
- Changing payment information
- Deleting account data
Security notifications
Tiquo automatically notifies users whenever a sign-in is detected from an unfamiliar device, location, or network.
Alert details
Notifications include device type and OS, IP address and geographic region, authentication method, and login timestamp.
Session management
Staff can view all logged-in devices, login history and locations, and immediately revoke suspicious sessions or force logout from all devices.
Use these notifications to check whether you recognise the sign-in and respond to unauthorised access.
Activity logs
Tiquo logs staff and customer actions across the platform.
Staff activity logs
- Configuration changes: record all configuration and setting changes
- Rollback support: enable rollbacks to previous states
- User attribution: track which user made each change
- Audit trail: support auditing and accountability
Customer activity logs
Customer logs record account interactions, authentication events, and profile changes for support and compliance reviews.
Activity logs let you trace actions and identify who carried them out.
Accessibility and inclusive design
Tiquo includes accessibility features to help users navigate, understand, and use the platform.
Accessibility standards
| Standard | Description |
|---|---|
| WCAG 2.2 | Perceivable content, operable controls, clear interfaces |
| EN 301 549 | European accessibility requirements |
| WAI-ARIA | Interactive elements compatible with assistive technologies |
These accessibility features apply to security, authentication, and daily operations across devices.