<!-- DOCUMENT CLASS: DEVELOPMENT | SOURCE: 25_IDENTITY_ONE_ACCESS.md -->

Identity & One Access

Purpose

One Access is the identity entry layer for the IntegrateWise ecosystem.

Identity hierarchy

Principal
→ Tenant
→ Organization
→ User
→ Role
→ Permission
→ Authority

Identity types

Human User
Service Identity
Agent Identity
External Agent Identity
System Identity

Authentication

Authentication establishes who/what is acting.

Authorization

Authorization establishes what that principal may see/do.

Provider auth

Provider OAuth/API credentials are separate from IntegrateWise identity.

Boundary

Identity
≠
Provider Credential
≠
Authority
≠
Capability

Required properties

• tenant isolation;
• scoped sessions;
• auditable principals;
• token expiry;
• least privilege;
• service identity separation;
• agent identity separation.