Ecosystem

Connects to the stack you already run.

SidantiX is a proof layer for access decisions — connecting to your IdP, directories, and legacy systems with outbound-only connectors and honest text badges where logo rights don't apply.

Connects to

Active Directory LIVE OpenLDAP LIVE AWS IAM LIVE GCP IAM LIVE Okta BETA Microsoft Entra ID BETA Saviynt BETA SailPoint DESIGN PARTNER Workday DESIGN PARTNER ServiceNow DESIGN PARTNER

Text badges only — no implied partnership or endorsement. Status reflects current connector maturity.

Integration patterns

Every source you have. All optional.

Legacy IGA platforms

If you already run SailPoint or Saviynt, SidantiX connects to them as optional migration inputs — pulling entitlement data, executing verified revoke directly on downstream targets, and adding NHI/AI coverage they weren't designed for. Migrate off at your own pace, or replace outright.

Entitlement readDirect revoke executionEvidence export

Identity providers

Okta and Entra ID remain your authentication plane. SidantiX governs lifecycle gaps, certifies access, and proves removals across downstream apps.

SCIMAPI connectorsHR-driven events

Legacy & on-prem

Active Directory and OpenLDAP connectors are live. PeopleSoft and mainframe connectors are on the design-partner roadmap — contact us for timeline and scoping.

mTLS gatewayAgentless where possibleRestricted networks

Cloud & SaaS

AWS IAM, Snowflake, GitHub, Google Workspace, and more — unified in one identity graph with closed-loop revoke and proof.

API keysService accountsAI agents

Outbound-only architecture — SidantiX signal ingests via HR/IdP webhook, decides in the control plane, fans out revoke over outbound mTLS to your systems, verifies removal, seals with ECDSA-P256 + SHA-256 hash chain, writes evidence to your S3 with Object Lock, and the auditor verifies offline with your public key. — Outbound-only architecture · no inbound firewall ports · keys and storage stay with you