Truly passwordless workforce identity

Iru Access

Iru’s phishing-resistant authenticator ties passkeys to a trusted device. It powers passwordless MFA and real-time checks on device security posture at every login.

Trusted authenticator lineage

New authenticators are cryptographically signed by a previously registered device. Built-in checks for physical presence stop bad actors from adding authenticators remotely.

Granular authentication policies

Define conditional access to apps based on device security posture and contextual signals. Iru evaluates device data in real time at sign-in and enforces policies automatically.

User lifecycle management

Provision, update, and remove accounts in SaaS apps via SCIM. Automatically map roles, sync attributes and groups, and cut access the moment it’s revoked.

Auto Groups

Automatically create groups using any attribute, such as role, location, or department. Users are added and removed from groups when attributes change, enabling scalable access control for SaaS apps.

Visual mode, code mode

Toggle between an intuitive visual editor and editing via code. Work in drafts, preview the impact, and apply changes with confidence.

Version control

Draft, diff, and stage changes to your users, groups, policies, and app configurations with GitOps-style versioning. Apply or roll back changes with an immutable history of who changed what and when.