Community
Free
Includes
- Users, groups and hosts
- Central sudo rules
- Delegated administration (RBAC)
- OTP two-factor authentication
- Multi-master replication
- Backup and restore
- Unlimited managed hosts
Subscription
IDMatrix
Self-hosted identity for up to 500 managed hosts: Active Directory trust, an integrated certificate authority, host-based access control and Kerberos single sign-on.
Overview
Identity is the one piece of infrastructure that cannot be outsourced in every environment. Regulated estates, air-gapped networks and sovereign deployments all need the directory, the certificate authority and the SSO to stay inside the perimeter.
IDMatrix is a self-hosted identity platform. It carries an Active Directory trust, integrated DNS, its own certificate authority with issuance and renewal, host-based access control, Kerberos single sign-on, password policy, SSH key distribution and automount.
One licence covers five replicas and up to 500 managed hosts. It is sold and renewed through sales rather than self-service, so the terms match the deployment.
Capabilities
01
Active Directory trust
Users keep the accounts they already have. Existing AD identities authenticate against IDMatrix-managed hosts without a second directory to maintain or migrate.
02
Certificate authority, issuance and renewal
Host and service certificates are issued and renewed automatically. The renewal is the part that matters: an expired certificate is the most common way a working estate stops working.
03
Host-based access control
Decides who may reach which host, centrally, rather than as per-machine configuration that drifts the moment somebody is in a hurry.
04
Kerberos single sign-on
One authentication, then access to the services that trust the realm, with no password crossing the network on every hop.
05
Password policy and SSH key distribution
Policy is enforced where accounts live, and SSH keys are distributed from the directory instead of being copied to hosts by hand and left behind when someone leaves.
06
Integrated DNS and automount
DNS and home-directory automount are part of the same system as the directory, so enrolling a host does not mean configuring four things that must agree.
Editions
Professional
RecommendedPricing on request
Includes
- Up to 100 managed hosts
- Host-based access control
- Password policy
- SSH key distribution
- Certificate issuance and renewal
- Kerberos single sign-on
- Integrated DNS
- Automount
- Certificate authority
Enterprise
Pricing on request
Includes
- Up to 1,000 managed hosts
- Host-based access control
- Password policy
- SSH key distribution
- Certificate issuance and renewal
- Kerberos single sign-on
- Integrated DNS
- Automount
- Certificate authority
- Active Directory trust
What each edition includes
| Capability | CommunityNo licence · Free for good | ProfessionalRecommended1 server · 12-month term | Enterprise99 servers · 12-month term |
|---|---|---|---|
| Price | Free | Pricing on request | Pricing on request |
| Up to 100 managed hosts | Not included | Included | Not included |
| Host-based access control | Not included | Included | Included |
| Password policy | Not included | Included | Included |
| SSH key distribution | Not included | Included | Included |
| Certificate issuance and renewal | Not included | Included | Included |
| Kerberos single sign-on | Not included | Included | Included |
| Integrated DNS | Not included | Included | Included |
| Automount | Not included | Included | Included |
| Certificate authority | Not included | Included | Included |
| Up to 1,000 managed hosts | Not included | Not included | Included |
| Active Directory trust | Not included | Not included | Included |
Need Enterprise, or a deployment shape not in the table? Contact sales