Secure, smart access to everything you subscribe to.

Because it already authenticates your users and governs what they can reach - it's already in the identity path and the system of record for access, managed and certified. Using it for IAM extends something you already run and trust, instead of standing up a separate platform.

You do. Portium answers to your institution: it's built backdoor-free, your identity data stays where your policy and region require, and what your people do stays governed by your rules - not ours.

No. Implementation is easy and tailored: we shape the deployment, the connectors and the role model to your institution in the onboarding agreement, and run it as a managed service - so go-live doesn't fall on your team.

We run Portium as a managed cloud service, and for most institutions that's the right call. Just as RA21 moved access beyond self-hosted IP authentication, the field has moved toward managed services that are kept current, patched and watched for you - rather than an unmanaged system your own team has to nurse. Your policies still govern everything: we put them in writing in the onboarding agreement, keep full transparency over what's shared, and back it with full compliance such as ISO, HIPAA and SOC 2 Type II audited by KPMG. Where data-residency or regulation calls for it, we also offer on-premises or hybrid, with EEA or on-prem data-residency, multi-zone topology and redundancy - chosen with you.

Your HR and Student Information System as the source of truth (e.g. Banner, SAP HCM / SuccessFactors), with provisioning into Active Directory, LDAP, Microsoft Entra ID / Azure and Google Workspace - delta-based, with retry and self-healing.

SAML 2.0 and OIDC single sign-on, multi-factor authentication, and federation with Shibboleth, SURFconext, Entra, Okta and Duo. Portium works as both an identity provider and a service provider.

Automatically. Accounts and entitlements are created on join, adjusted on every role change, and revoked on leave - so access is never late and there are no orphaned accounts.

Role- and attribute-based access for least-privilege, access requests with approvals and Segregation of Duties, and periodic certification campaigns where managers re-confirm - or revoke - who has access to what.

They're governed too - sponsored, time-bounded identities entered manually, with automatic expiry - alongside self-service and delegated administration for local teams.

Yes. Revision-safe, tamper-evident logs of every identity and access event are retained per policy, with reporting and usage statistics, and security events stream to your SIEM (such as Microsoft Sentinel) - all GDPR-compliant.

Yes - tens of thousands of identities across distributed sites, with redundancy and self-healing, without degradation.

ISO 27001, SOC 2 Type II and HIPAA, with encryption in transit and at rest, WAF and DDoS protection and regular penetration testing - backed by maintenance and security-patch SLAs for the life of the system.

Through open APIs: REST and SCIM for provisioning, SOAP / SPML where legacy systems require it, and graph and directory APIs - so it fits the long tail of institutional systems.

Yes - password reset, profile management and access requests for users, plus delegated administration so local teams manage their own scope, which removes load from the IT help desk.