iDen2
Enterprise

Workforce, suppliers, and their agents in one fabric.

Employees, contractors, suppliers, and the AI agents acting inside the business, governed by verifiable credentials and revocable mandates.

See the platform
In practice

See the credentials in this industry.

From identity to action.
Acme Corp · HR
Employee ID
Verified
Subject
Alex Larsen
Role
Staff engineer
Dept
Platform
Employee #
E-18420
Issued
2024-03-12
Signed · SD-JWT VCdid:web:iden2
Alex Larsen · mandate
Agent Delegation
Verified
Subject
Ops Agent · v1.4
Scope
ERP · CRM · Email
Spend
••••••
Expiry
72 hours
Status
Revocable
Signed · SD-JWT VCdid:web:iden2
Ops Agentpresents the mandate
  • ERP
  • CRM
  • Email
  • Code
  • HRIS
  • Finance
Industry problem

Humans, contractors, and agents each carry a different identity, and none of them revoke together.

HR, procurement, and IAM each run their own identity system. Access reviews take quarters. Contractors linger after engagements end. Agent access is a shared secret in a config file.

  • Access reviews miss 25–40% of privileged access in typical audits.
  • Contractor offboarding is the leading source of orphaned accounts.
  • Agent credentials are increasingly the target of API-key exfiltration attacks.
Workflow

From hire to revoke, everything signed and audited.

  1. 01
    Onboard
    HR issues a workforce credential with role and scope.
  2. 02
    Provision
    Systems grant access based on verifiable attributes.
  3. 03
    Delegate
    Employee mandates an agent for a bounded task.
  4. 04
    Attest
    Access reviews driven by live credential status.
  5. 05
    Revoke
    Termination propagates to every dependent system.
Platform capabilities

The iDen2 capabilities you get out of the box.

Workforce credentials
Employees, contractors, and suppliers under one model.
Agent runtime
Bounded, revocable authority for internal AI agents.
Access attestation
Continuous, credential-driven access reviews.
Audit ledger
Signed evidence for SOC 2, ISO 27001, DORA, NIS2.
Real use cases

How one identity fabric is used across the business.

Contractor lifecycle
Engagement credentials expire the moment a contract ends.
Supplier onboarding
Signed org credentials replace vendor questionnaires.
Internal AI agents
Every autonomous action is bound to a verified employee.
Workforce access
Role and entitlement travel with the employee across systems.
Privileged access
Elevated rights are issued as time-bounded, revocable credentials.
Partner ecosystems
External collaborators enter with a signed, scoped engagement.
Access reviews
Attestations read live credential status instead of quarterly spreadsheets.
M&A integration
Acquired employees and suppliers keep a verifiable identity through the cutover.
Offboarding
Termination revokes human and agent access in the same event.
Outcomes

Measurable results in weeks, not quarters.

-95%
orphaned accounts
hours
supplier onboarding
from weeks
100%
agent action attributable
SOC 2
audit-ready by default
Next

Bring iDen2 to your enterprise stack.

See a live workflow tailored to your systems, or explore the developer sandbox.

Developer docsAll applications →