The identity layer built into every Eazi product. One login, one directory, one audit trail — included free the moment you sign up for Flow Ledger, Steward, or any other Eazi product. It isn't sold separately and doesn't work outside our products.
Keystone IAM is the single sign-on layer that Flow Ledger, Steward, and every other Eazi product authenticate against — so your team manages one account instead of one per system. It comes bundled with every product at no extra cost.
A complete identity provider: authorization and token endpoints, a discovery document, JWKS, userinfo, token revocation, and RP-initiated logout. Supports the Authorization Code flow with PKCE and a tenant picker, refresh tokens, and the Device Authorization Grant for TVs, kiosks, and CLIs. Backchannel logout notifies every connected application server-side the moment a user signs out — with delivery-failure reporting so nothing fails silently.
Your organisation gets its own tenant with its own users, roles, and product access — completely separate from every other organisation on the platform. If your team uses more than one Eazi product, a tenant switcher lets people move between them without logging in again.
Role-based access control scoped to your organisation and to each product you use. Your own admins manage who has access to what — no waiting on us to add or remove a teammate.
Sign up for a second Eazi product and your organisation is provisioned automatically behind the scenes — no separate signup, no manual account setup, no waiting on support to get your team access.
Sign in with Google alongside standard email and password, with forgot-password recovery over email or SMS OTP, email verification, and full profile self-management — no support ticket required for routine account tasks.
Your own admins can import your whole team from a CSV in one go, with resend-verification for stragglers — built for onboarding an entire organisation at once, not one account at a time.
Every login and admin action within your organisation is captured in a searchable activity log — a complete, tamper-evident record your own admins can review at any time.
Keystone IAM isn't sold on its own — it's the sign-in layer that comes free with Flow Ledger, Steward, and every other Eazi product. Sign up for a product and it's ready to go.