Advanced Capability

Authentication

Authentication that adapts to your platform.

Run one multi-portal platform while meeting different identity requirements across customers, specialists, organizations, and affiliates.

Advanced capability screenshot

How it works

A streamlined process designed for efficiency and control

1

Select authentication models per portal to balance conversion and security

2

Enable SSO (SAML/OIDC) for organization tenants that require enterprise access

3

Configure passwordless and MFA policies by role, portal, or tenant

4

Apply session and device controls for predictable security behavior

5

Align sign-in context with audit and permissions workflows

Core capabilities

Enterprise-grade features for complex operational needs

Customer-Friendly Login

Support email + password, magic link, or OTP-style sign-in to reduce onboarding friction.

Specialist-Grade Verification

Stronger verification with optional MFA and stricter session policies for care teams.

Organization SSO

Enable SAML or OIDC single sign-on with tenant-level enforcement for enterprise orgs.

Affiliate Access

Lightweight authentication flows gated by approval and onboarding requirements.

Passwordless + MFA

Offer magic links and email OTP alongside configurable multi-factor enforcement.

Step-Up Authentication

Require extra verification for sensitive actions when the policy demands it.

Session Controls

Idle and absolute timeouts with clear rules for each portal or role.

Device Trust

Remember trusted devices where enabled to balance usability and security.

Audit-Ready Context

Track who signed in, when, and from where to support governance needs.

Built for scale and precision

Our advanced capabilities are designed for organizations that need granular control, sophisticated workflows, and enterprise-grade reliability.

Configurable login experience by portal
SAML and OIDC support for enterprise SSO
Tenant-level enforcement of required login methods
Identity lifecycle alignment with provisioning workflows
Dashboard view

Use cases

See how different organizations leverage this capability

Organizations

Enterprise Organization Access

Organizations use SSO while keeping consistent access across their internal teams.

Customers

Fast Customer Onboarding

Customers use frictionless passwordless login without compromising security.

Specialists

Specialist Compliance

Specialists adopt stronger verification and session rules to protect patient data.

Affiliates

Affiliate Network Control

Affiliates access tools through lightweight flows tied to approvals.

Security

Security Governance

Security teams enforce consistent policies and audit-friendly sign-in context.

Why choose this capability

Configurable login experience by portal
SAML and OIDC support for enterprise SSO
Tenant-level enforcement of required login methods
Identity lifecycle alignment with provisioning workflows
Passwordless sign-in options for lower friction
Role-based MFA enforcement
Step-up authentication for sensitive actions
Idle and absolute session timeout policies
Trusted device patterns when enabled
Balanced account recovery workflows
Portal-aware policies for customers vs specialists
Clear separation of authentication and permissions

Map authentication to every portal

Talk to us about SSO, MFA, and session policy design for customers, specialists, organizations, and affiliates.