securityIwayCloud platform security services

The IW PaaS platform from an architectural approach implements measures to mitigate security threats:

  • Minimizes network connections
  • It isolates customer applications and data in containers
  • Encrypts communication
  • Uses RBAC access elements
  • It ensures the isolation of application elements in a multitenant environment
  • Prevents possible DDoS attacks
border_horizontal
Segment isolation service
The service provides dedicated resource groups on which fully isolated applications can be deployed. By using isolated segments, application resources are completely separated as if they were deployed on separate PaaS platforms, but redundancy in management components and network complexity is eliminated.
vpn_key
Authentication and authorization service
User account and authentication is the central identity management service of the PaaS platform and its components. It provides an OAuth2 authorization server and issues access tokens to applications that request platform resources. The service ensures the storage of user data and passwords in the internal DB, or allows connecting external repositories via LDAP and SAML.
supervised_user_circle
RBAC service
The platform uses role-based access control (RBAC), where each role is granted permissions within an organization or within a workspace.
verified_user
Application security service
(application FW)
Application security groups are collections of egress rules that specify the range of protocols, ports, and IP address ranges through which an application or task sends data.
keyboard_arrow_right
Secure access services
to applications and services
This group of services includes services such as: access service to CNA via SSH, access service to PaaS services via SSH ...
local_activity
Active Directory Federation Service
Active Directory Federation Services (AD FS) is a standards-based service that securely shares identity information between applications.
lock_open
Single sign-on service
Single sign-on service allows users to sign in through a single sign-on service and access other applications that are hosted or protected by the service. This increases security and productivity because users do not have to log into individual applications.