NAVICORE ONE company operating system · Part 04 · Security & trust
Sign-in & identity
Let the right people into your company's workspace, and keep everyone else out.
What this page describes is the intended scope from the product specification. The status label shows how far along this area is.
Illustrative layout, not a live screenshot.
What it is
Registration for companies and individuals, employee invitations and domain verification, then sign-in with passwords, multi-factor authentication, passkeys, OAuth and single sign-on. Sessions and devices are tracked, and protections such as rate limiting, lockout and secure cookies sit around all of it.
The problem
Weak sign-up and sign-in is how the wrong person gets into company data.
What NAVICORE ONE does
Companies verify their domain and company email, employees join by invitation, sign-in can add MFA, passkeys or SSO, and sessions and devices can be reviewed and ended remotely.
The result
Only verified people from the right company get in, and you can see and end their sessions.
Who uses it, and when
- Company owners
- When registering the company and proving it owns its domain
- Employees
- When accepting an invitation, and every time they sign in
- Owners and super admins
- When reviewing login history, active sessions and suspicious activity
How it works, step by step
A company registers
Sequence assembled from this part's listed functions, in plain language.- 1
Company registration
- 2
Domain ownership verification
Prove the company owns its domain
- 3
Verified company email
Public and temporary email providers are blocked
- 4
Email verification
- 5
Signup approval
- 6
Sign in
Password, MFA, passkey, OAuth or SSO
An employee joins
Sequence assembled from this part's listed functions, in plain language.- 1
Employee invitation
- 2
Invitation verification
- 3
Account created
- 4
Sign in
With the company's sign-in rules
Key functions
Company & personal registration
Two ways to start: as a company, or as an individual.
Domain verification
Proves a company really owns the domain it registers with.
Public & temporary email blocking
Keeps free and throwaway email addresses from registering a company.
Invitation verification
An employee can only join through a valid invitation.
MFA & TOTP
A second step at sign-in, such as a one-time code from an authenticator app.
Passkeys
Sign in with a device-based key instead of typing a password.
OAuth & SSO
Sign in through another trusted account, with a SAML/OIDC architecture for enterprise single sign-on.
Sessions, devices & remote logout
See active sessions and devices, and sign one out from afar.
Login history
A record of who signed in, and when.
Suspicious login & lockout
Detect unusual sign-ins and lock an account that is being attacked.
Built-in protections
Rate limiting, secure cookies, CSRF and XSS protection, secure headers, encryption and server-side authorization.
Full scope from the product specification (35 items)
Registration
- Company registration
- Personal registration
- Employee invitation
- Company domain verification
- Domain ownership verification
- Verified company email
- Public email provider blocking
- Temporary email blocking
- Email verification
- Invitation verification
- Signup approval
Login
- Email/password
- Password reset
- Password change
- MFA
- TOTP
- Passkeys
- OAuth
- SSO
- SAML/OIDC architecture
- Session management
- Device management
- Login history
- Active sessions
- Remote logout
Security
- Rate limiting
- Suspicious login detection
- Account lockout
- Secure cookies
- CSRF protection
- XSS protection
- Server-side authorization
- Secure headers
- Encryption
- Security alerts
How it connects to other parts
- Part 05In build
Roles & permissions
Decide exactly who can see and do what, down to a department, team or single project.
- Part 36Planned
Device management
See every device signed in to your account, trust the ones you know and revoke the rest.
- Part 37In build
Security center
Watch sign-ins, devices, permission changes and alerts for the whole company in one place.
- Part 23In build
Audit trail
Keep a permanent record of who did what, when and what changed, for every important action.
- Part 44Planned
Client onboarding
Bring your company onto NAVICORE ONE in four stages, from registration to launch day.
See it in action
Ask for a demo, or tell us how you would like to partner.