Single sign-on and MFA
OIDC single sign-on connects to your identity provider through a discovery URL and client id. Multi-factor authentication and a session timeout policy are set per organisation.
Workspaces and roles
Work is scoped to a workspace, and membership of that workspace is what grants access. Roles separate who can view, edit, approve and administer.
Enforced in the database
Row-level security applies to every table, keyed on workspace membership. A request that should not return a row does not return it, regardless of what the client asks for — the interface is not the thing standing between a user and someone else’s data.
What this covers in the product
Every capability below is part of this area of Yantra Studio.
- Settings
- Admin
- SSO / OIDC
- MFA
- Session policy
- Audit log
- Extensions
- Preferences…
Questions
Is SSO supported?
Yes, OIDC single sign-on configured per organisation with a discovery URL and client id.
How is tenant separation enforced?
By row-level security on every table, keyed on workspace membership, rather than by filtering in the application.
Can session length be controlled?
Yes, session timeout and MFA requirements are organisation-level policy.
Related capabilities
-
Diagrams that go through review, not around it
Put architecture diagrams through a real approval workflow: draft, review, approved, with reviewers, an audit log and validation gates that block submission.
-
Diagrams in Git, on branches, with history
Store diagrams in your own GitHub repository, work on branches, browse version history and merge diagrams — the same workflow your code already uses.
-
Show the diagram without handing over the model
Share a diagram by link, present it to an audience, or embed it in another site — read-only, without giving anyone an account or edit rights.