Returning Users
Sign In / Access PortalNew Users
Request Demo TourDelegated Identity Model
Delegation Scopeai:basic
Claims SourceOkta access token
Enforcement PointHR Enclave
Agent ModeDelegated
AI Agent Security Controls
IDENTITY STANDBY
Authorization Decision Flow
1. Agent Requestoperation_id: payroll_export · actor: delegated_agent
2. Relevant Claimsaccess_token.claims — not bound
3. HR Enclave Policyevaluation deferred — bearer proof missing
4. DecisionSign in required