Skip to main content

Getting started with Ciyora Fortress

Ciyora Fortress covers identity governance, access requests, privileged access, non-human identities and identity threats. Its pages are under Identity, Access / PAM and Governance in Ciyora Console.

1. Check your identities​

  1. Under Identity > Identities, confirm people arrived from your HR connector with the right department and manager.
  2. Under Identity > Account mapping, link or disable orphaned accounts and resolve duplicates.
  3. Under Identity > Non-human identities, assign owners and rotation schedules, starting with the highest risk.

2. Turn on governance controls​

  1. Under Governance > Separation of duties, review the policies and enable the ones that apply to you. Run a scan to see existing violations.
  2. Under Identity > Lifecycle, set birthright rules for joiners.

3. Open the self-service catalogue​

Add catalogue items so employees can request access under Request access in the portal. Requests arrive in Access / PAM > Access requests with their SoD result.

4. Move privileged access to just-in-time​

  1. Under Access / PAM > Just-in-time access, review standing privilege findings.
  2. Define JIT policies with a maximum duration, approval and MFA to activate.
  3. Add privileged credentials to Access / PAM > Credential vault and set rotation.
  4. Configure Break-glass credentials and the number of approvers.

5. Review access​

Start an access review under Governance > Access reviews, and export the evidence pack when it closes.

Related concepts: Identities, Access requests, JIT and break-glass, Audit chain.