Security
Authentication, session policy, and the audit trail. Security defaults are strict; exceptions are explicit and logged.
2FA coverage
67%
SSO
Not set
Active sessions
3
Audit events · 30d
184
Require 2FA for admins and owners
Enforced immediately
Require 2FA for all members
7-day grace period
Allow passkeys
Stronger than passwords, phish-resistant
Allow password sign-in
May be disabled once SSO is enforced
Single sign-on (SAML) Available
Connect Okta, Entra ID, or Google Workspace. Enforce SSO for everyone and keep a break-glass owner account.
Protocol
SAML 2.0
Provisioning
SCIM available
Default role
Viewer
Chrome · macOS
73.14.22.8 · New York · Current session
Safari · iPhone
73.14.22.8 · New York · Mobile
Chrome · Windows
73.14.22.31 · Austin · Support desk
| Actor | Action | Target | IP | Time |
|---|---|---|---|---|
| Maya Chen | Published agent version | Suncoast Support · v12 | 73.14.22.8 | Today, 08:24 |
| Daniel Okafor | Ran report | Revenue by team · custom range | 73.14.22.19 | Today, 08:02 |
| System | Delivery failed | Fleet utilization → Discord #infra | — | Yesterday, 18:01 |
| Priya Raman | Invited member | omar@suncoastservers.com · Viewer | 73.14.22.31 | Nov 9, 14:12 |
| Maya Chen | Rotated API key | Production website | 73.14.22.8 | Nov 8, 10:44 |
Security posture
Admins require 2FA
All members use 2FA
SSO enforced
Audit log streaming
Backup codes issued
IP allowlist
Restrict admin access to office egress ranges. Support agents on residential IPs are unaffected.
Break-glass access
One owner account retains password access if SSO is unavailable. Its use triggers an immediate alert.
maya@suncoastservers.com
Owner · last used never
Unrecognized sessions?
Revoke all sessions and rotate API keys. Audit events keep the actor and IP.