Files
Sankofa/docs/marketplace/sovereign-stack/identity-service.md
defiQUG 33d50fb91e
Some checks failed
API CI / API Lint (push) Successful in 47s
API CI / API Type Check (push) Failing after 47s
API CI / API Test (push) Successful in 1m0s
API CI / API Build (push) Failing after 50s
API CI / Build Docker Image (push) Has been skipped
Build Crossplane Provider / build (push) Failing after 5m51s
CD Pipeline / Deploy to Staging (push) Failing after 29s
CI Pipeline / Lint and Type Check (push) Failing after 36s
CI Pipeline / Build (push) Has been skipped
CI Pipeline / Test Backend (push) Failing after 1m33s
CI Pipeline / Test Frontend (push) Failing after 30s
CI Pipeline / Security Scan (push) Failing after 1m16s
Crossplane Provider CI / Go Test (push) Failing after 3m23s
Crossplane Provider CI / Go Lint (push) Failing after 7m27s
Crossplane Provider CI / Go Build (push) Failing after 3m27s
Deploy to Staging / Deploy to Staging (push) Failing after 30s
Portal CI / Portal Lint (push) Failing after 21s
Portal CI / Portal Type Check (push) Failing after 21s
Portal CI / Portal Test (push) Failing after 21s
Portal CI / Portal Build (push) Failing after 22s
Test Suite / frontend-tests (push) Failing after 30s
Test Suite / api-tests (push) Failing after 49s
Test Suite / blockchain-tests (push) Failing after 30s
Type Check / type-check (map[directory:. name:root]) (push) Failing after 23s
Type Check / type-check (map[directory:api name:api]) (push) Failing after 21s
Type Check / type-check (map[directory:portal name:portal]) (push) Failing after 19s
Validate Configuration Files / validate (push) Failing after 1m52s
CD Pipeline / Deploy to Production (push) Has been skipped
chore: consolidate local WIP (repo cleanup 20260707)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 09:41:34 -07:00

2.1 KiB

Phoenix Identity Service

Category: IDENTITY_SERVICES
Publisher: Phoenix Cloud Services
Status: PUBLISHED
Version: 1.0.0

Overview

Phoenix Identity Service provides comprehensive identity, authentication, and authorization with support for users, organizations, roles, and permissions. Features device binding, passkeys support, OAuth/OpenID Connect for integrations, session management, and risk scoring.

Key Features

  • Multi-tenant identity: Isolated identity per tenant
  • RBAC: Fine-grained role-based access control
  • Device binding: Secure device registration and management
  • Passkeys support: WebAuthn/FIDO2 authentication
  • OAuth 2.0 / OIDC: Standard protocols for integrations
  • Session management: Secure session handling with refresh tokens
  • Risk scoring: Behavioral analysis and risk assessment
  • SCIM support: System for Cross-domain Identity Management

API Endpoints

Create User

POST /identity/users
Content-Type: application/json

{
  "email": "user@example.com",
  "name": "John Doe",
  "orgId": "org_123"
}

Create Organization

POST /identity/orgs
Content-Type: application/json

{
  "name": "Acme Corp",
  "domain": "acme.com"
}

Bind Device

POST /identity/devices/bind
Content-Type: application/json

{
  "userId": "user_123",
  "deviceType": "mobile",
  "fingerprint": "device_fingerprint_hash"
}

Get Sessions

GET /identity/sessions?userId=user_123

Authenticate

POST /identity/auth/token
Content-Type: application/json

{
  "grantType": "password",
  "email": "user@example.com",
  "password": "secure_password"
}

Pricing

  • Model: Subscription-based
  • Base Price: $99/month
  • Per User: $2.50/month
  • Per Organization: $50/month

Compliance

  • SOC 2 Type II
  • GDPR compliant
  • HIPAA ready

SLA

  • Uptime: 99.95%
  • Latency: <50ms p95

Architecture

Built on Keycloak with sovereign identity principles:

  • No Azure dependencies
  • Multi-realm support
  • Federated identity
  • Custom authentication flows