Control and treasury
Users and access control
Access to every action is governed by role and context, and critical operations require a second employee’s approval.
What is inside
- 01
RBAC and ABAC access models for back-office roles
- 02
Authentication through LDAP, Active Directory, SAML and OIDC
- 03
Segregation of duties (SoD) for critical operations
- 04
Four-eyes approval for large payments and write-offs
- 05
An immutable audit log of every user action
- 06
Role-based workstations: teller, cashier, credit officer, chief accountant
- 07
Approval engine: the initiator cannot approve their own operation
- 08
The audit log is protected from changes at the database level
- 09
Own OIDC server and API keys bound to the bank
