Identity & Access
SSO directory auditing, privilege drift scanning & Zero-Trust MFA
SYS.SEC_V3.8 // ACTIVE
🛡️ White-Label
Last scan: Real-time
SS
Identity PreCheck — SSO Directory Auditing (Microsoft Entra ID)
🌐 Active SSO Integration: United Rentals Entra ID Connected
91%
Zero Trust Score
SSO Travel / Login Alerts
2
🚨 High CVSS travel spikes
Excessive IAM Drift Roles
7
Drifts from standard privilege
Zero Trust Status
OPTIMIZED
🟢 Identity parameters are optimal
Module 07

Identity PreCheck Telemetry

DEMO DATANOMINAL
SSO IDENTITY DIRECTORYOKTA15.4K IDsadmin@corpSUPER ADMINMFA ✓svc-deployORPHAN ACCTMFA MISSINGjohn@corpENGINEERMFA ✓old-api-keyPRIV DRIFTMFA MISSING640 MFA POLICY GAPS1.82K privilege drifts48 orphans disabled
SSO Identities Funnel
○ BASELINE
1.4KSSO IdentitiesTotal directories SSO users mapped
184Privilege DriftsIAM users with excessive role drift
9MFA GapsActive users without MFA enforcement
1.3KOrphans DisabledOrphaned stale accounts deactivated
Enterprise GRC Checkpoint
Directory IntegrationENTERPRISE
Secure Active Directory / Okta SSO authentication endpoints.
MFA EnforcementENTERPRISE
Audit and enforce multi-factor authentication coverage.
🚨 Active SSO Travel & Authentication Anomaly Alerts

Real-time Identity Threat Detection (ITDR) showing login anomalies. Revoke compromised user tokens in real-time.

Orphaned SSH Key AuthenticationUser: fleet-ops-admin@unitedrentals.com
critical

Successful login utilizing an orphaned, stale SSH key without active ticket logs.

API Key AnomalyUser: rental-portal-sync@ur.internal
high

Unusual outbound request volume initiated within 2 minutes.

🔑 High Privilege Role Drift Auditor

List high-risk administrative user roles showing permission drift. Deprovision excessive permissions to enforce Least Privilege.

Administrative RolePermission Drift StatusLeast Privilege Actions
Global Fleet Sync ProfileScope: Root Owner · (3 users)Stale SSH Key Used
Customer Portal SupportScope: Support Agent Access · (18 users)Excessive IAM Permissions
Directory MFA Coverage
Active Directory Enrolled Accounts:98.2% Enforced
💻 IAM Terminal — Live Session & Privilege Deprovisioner