Fine Grained Access Control

The end user is a critical member of the SaaS ecosystem – after all, they’re the ones that will benefit from your SaaS application! This means that nearly all SaaS applications need a user system and the ability to secure various parts of the application with role based access control. SaaSGrid provides a centralized, pre-built user and role system that is tightly integrated with SaaSGrid’s own authentication, authorization, and subscription management systems. Leveraging SaaSGrid’s user system ensures that you can focus on your application and not auxiliary systems, but also guarantees that your customers can leverage their user, role and account information across new applications you may release.

Whether you plan on offering self provisioning to your customers, plan on provisioning customers on their behalf, or a mixture of both, SaaSGrid can help!

Key Points

• Extensible user profile management, including personal information, contact information, and locations.

• Hierarchical role management, allowing for role nesting, user inclusion, and runtime evaluation against meta-data based access control maps.

• Tightly integrated with all relevant SaaSGrid systems, including authorization, authentication, and subscription management.

• All data accessible via the SaaSGrid API, allowing your application to tightly integrate with the user experience.

Impact on Cost of Service: MEDIUM


Why?

SaaS is fundamentally mired with tangential requirements, and none is as important as a multi-tenant access control system. Nearly all applications must provide user and role management, which typically account for a significant part of the overall project effort. SaaSGrid’s user and role systems helps you hit the ground running and avoid being plagued by such non-strategic yet mission critical sub-systems.


Software Engineers Should Know

SaaSGrid allows your organization to easily weave complex security checkpoints into your SaaS application. These checkpoints can be used to prevent access to certain user interface items and even block calls to your application's web services API. When you deploy your application on SaaSGrid, your application publishes information regarding security checkpoints that your customers can configure. Your customers can then map roles to those checkpoints, giving them huge amounts of value by letting them map their own security expectations to your application's security infrastructure.


Related Media