IDTA Identity Provider

The IDTA Identity Provider is the identity service for the AAS ecosystem. It follows open standards to issue tokens, accept X.509 client certificates, and federate Microsoft Entra ID accounts, giving data providers and consumers a consistent identity layer without extra middleware.

play_arrow Get Started
security

Authentication options

Both methods share the same access policies in IDTA Identity Provider. Choose the credential that best matches your environment.

verified

X.509 certificate access

Use the PKI you already operate.

Upload a client certificate. The platform validates the leaf and chain against the root and intermediate authorities you registered.

check_circle Checks the full certificate chain in your trust store
check_circle Managed list of trusted root and intermediate CAs
check_circle Supports hardware-protected private keys
check_circle Applies the same authorization rules and audit logs as token flows
verified Certificate Login
account_circle

Microsoft Entra ID access

Use the existing Microsoft Entra ID login.

Redirect users to Azure AD for LOGIN and return to IDTA Identity Provider for token issuance. Keeps existing conditional access and MFA policies intact.

check_circle Standards-based OAuth 2.0 / OpenID Connect flow
check_circle Multi-tenant aware (supports guest tenants)
check_circle Pulls basic profile claims via Microsoft Graph
check_circle Respects Azure conditional access and MFA
account_circle Microsoft Login

Core capabilities

Identity building blocks for industrial software that need predictable behavior.

vpn_key

OAuth 2.0 & OpenID Connect

Issue access and refresh tokens with scoped permissions.

  • Access token generation
  • Refresh token rotation
  • Scope-based permissions
security

Token introspection

Query token state without sharing signing keys.

  • Token validation API
  • Metadata extraction
  • Cross-service verification
group

Identity lifecycle

Track users, certificates, and audit evidence in one place.

  • Certificate lifecycle
  • User provisioning
  • Audit logging