Subscription

IDMatrix

Self-hosted identity for up to 500 managed hosts: Active Directory trust, an integrated certificate authority, host-based access control and Kerberos single sign-on.

Contact sales

Overview

Identity is the one piece of infrastructure that cannot be outsourced in every environment. Regulated estates, air-gapped networks and sovereign deployments all need the directory, the certificate authority and the SSO to stay inside the perimeter.

IDMatrix is a self-hosted identity platform. It carries an Active Directory trust, integrated DNS, its own certificate authority with issuance and renewal, host-based access control, Kerberos single sign-on, password policy, SSH key distribution and automount.

One licence covers five replicas and up to 500 managed hosts. It is sold and renewed through sales rather than self-service, so the terms match the deployment.

Capabilities

Active Directory trust

Users keep the accounts they already have. Existing AD identities authenticate against IDMatrix-managed hosts without a second directory to maintain or migrate.

Certificate authority, issuance and renewal

Host and service certificates are issued and renewed automatically. The renewal is the part that matters: an expired certificate is the most common way a working estate stops working.

Host-based access control

Decides who may reach which host, centrally, rather than as per-machine configuration that drifts the moment somebody is in a hurry.

Kerberos single sign-on

One authentication, then access to the services that trust the realm, with no password crossing the network on every hop.

Password policy and SSH key distribution

Policy is enforced where accounts live, and SSH keys are distributed from the directory instead of being copied to hosts by hand and left behind when someone leaves.

Integrated DNS and automount

DNS and home-directory automount are part of the same system as the directory, so enrolling a host does not mean configuring four things that must agree.

Editions

Trial

Free

Includes

Max managed hosts: 20
Host-based access control
Password policy
SSH key distribution
Certificate issuance and renewal
Kerberos single sign-on
Integrated DNS
Automount
Certificate authority
Active Directory trust

Standard

Pricing on request

Includes

Max managed hosts: 100
Host-based access control
Password policy
SSH key distribution
Certificate issuance and renewal

Contact sales

Professional

Recommended

Pricing on request

Includes

Up to 500 managed hosts
Host-based access control
Password policy
SSH key distribution
Certificate issuance and renewal
Kerberos single sign-on
Integrated DNS
Automount
Certificate authority

Contact sales

Enterprise

Pricing on request

Includes

Max managed hosts: 1,000
Host-based access control
Password policy
SSH key distribution
Certificate issuance and renewal
Kerberos single sign-on
Integrated DNS
Automount
Certificate authority
Active Directory trust

Contact sales

What each edition includes

Capability
Capability	Trial1 server · 30 days	Standard1 server · 12-month term	ProfessionalRecommended2 servers · 12-month term	Enterprise99 servers · 12-month term
Price	Free	Pricing on request	Pricing on request	Pricing on request
Max managed hosts: 20	Included	Not included	Not included	Not included
Host-based access control	Included	Included	Included	Included
Password policy	Included	Included	Included	Included
SSH key distribution	Included	Included	Included	Included
Certificate issuance and renewal	Included	Included	Included	Included
Kerberos single sign-on	Included	Not included	Included	Included
Integrated DNS	Included	Not included	Included	Included
Automount	Included	Not included	Included	Included
Certificate authority	Included	Not included	Included	Included
Active Directory trust	Included	Not included	Not included	Included
Max managed hosts: 100	Not included	Included	Not included	Not included
Up to 500 managed hosts	Not included	Not included	Included	Not included
Max managed hosts: 1,000	Not included	Not included	Not included	Included

Need Enterprise, or a deployment shape not in the table? Contact sales