EnforceAuth Console — Visual Reference
A screen-by-screen tour of the EnforceAuth console, captured from the live product. Use it to recognize each page before you read the task steps in the User Guide. Routes are exact.
Navigation, top to bottom: Dashboard · Policies · Decisions · Audit trail · Deployments · Analytics (Coming Soon) · System Settings. Your identity and "Collapse Sidebar" sit at the bottom of the left rail.
Sign in
account.enforceauth.com

Sign in with email (Continue) or Continue with Google. Accounts with MFA are then prompted for an authenticator code. New to EnforceAuth? Sign up. After sign-in you land on the Dashboard.
Dashboard
/ — Real-time overview of your policy enforcement platform

The health-at-a-glance page. Pick a Timeframe (24 hours / 7 days / 30 days). Policy Statistics shows Active vs. Total policies; Decision Statistics shows Total Decisions, Average Duration, and Decision Volume Over Time. Pause stops the live refresh; Refresh now forces an update.
Entity Management (list)
/system-settings/entities — System Settings → Entity Management

Your entity tree. Toggle Table and Graph views, Search entities, filter by type ("All types"), and Create Entity. Each row shows the type badge (org / system), the name, an optional Root badge, a description, and External ID. The subtitle counts your structure. The root org cannot be deleted.
Entity detail
/entities/:id

Everything that hangs off one entity. Tabs: Relationships · Configuration · Secrets · API Keys · CI/CD Tokens — this is where per-entity Secrets, API Keys, and CI/CD Tokens live (they are not top-level pages). Relationship Information shows Path to Root, Parents, and Children. Configuration holds Policy Source and Bundle Destination cards, each labeled "Global default, can be overridden at system level" and showing Not configured with a Configure action until set. Top-right: View decisions (opens /decisions?entity_id= for that entity) / Edit / Delete.
Create Entity
/entities/new

Add an organization or system. Basic Information: Name (required), Type (Organization or System), Parent Entity ("Select an existing organization to create this entity as a child"), and Description. External Integration: External ID and External System (e.g. salesforce). New root organizations can only be created during tenant setup, so most entities you create here will have a parent.
Policies
/policies — Manage and analyze authorization policies across all systems

Two tabs: Statistics Overview and Policies. The overview tiles count Active · Error · Draft · Disabled · Total Policies, plus Coverage (% of policies evaluating live traffic). Top 10 Triggered Policies and Policy Usage Over Time populate once decisions flow. Use the Policies tab to open individual policies (view content, source, drafts, and history).
Deployments
/deployments — Policy deployment history · all entities · auto-refreshes every 60s

Trigger and track pipeline runs. Tiles: Initiated · In Progress · Successful · Failed. Search by run ID / entity / user and filter by Status. Deploy starts a run (test → build → publish). Empty until you configure a policy source. Pause / Refresh now control the live view.
Decisions
/decisions — Real-time policy evaluation log across all entities

The live decision-log stream ingested from your PDPs. Scope defaults to All entities; pick an Organization or System in the filter bar to narrow the list. Logs are tagged with the ingesting API key's entity. Org scope includes that organization plus descendant systems. An organization with no descendant systems is an exact match on that org, not an empty list and not the tenant-wide view. A system is an exact match. The list is empty only when nothing matches the selected scope. That picker is local to this page — a leftover Entity Management selection does not apply until you choose here.
Search accepts a decision UUID (exact decision_id) or a policy path prefix (the console sends path with a trailing * unless you already included a wildcard). The policy dropdown is an exact path. Outcome (including Partial), entity, time range, system ID, and bundle revision combine with AND. Copy the URL to share the same filters (entity_id, outcome, path, decision_id, from, to, system_id, bundle_revision). Advanced filters (system ID / bundle revision) are grouped separately from the primary bar. Scroll to load more results. The stats bar shows Total, Allow, Deny, Error, and Partial from the filtered API totals for the selected time range. When a decision ID or path search omits those totals, the bar counts rows loaded so far and is labeled loaded results. Decision Replay re-runs a recorded decision for investigation. Pause / Refresh now control streaming. Each log carries the input, the result, and its source system.
Audit trail
/audit-trail — What the agent did, when, and how to reverse it.
The autonomous-action trail. Decisions are newest first by decision time (when the agent acted). Agent actions stay in append order: sequence, action, agent, tool, result, reversal, and ticket. Open a row for the delegating human, reasons, and policy bundle revision. Verified intact means the hash chain checked out. Tampered means verification found a fault, and the banner names the sequence and the fault.
System Settings (portal)
/system-settings

The hub for tenant-level administration. Active cards:
- Entity Management — organizations, systems, and entity health (Manage Entities & Systems).
- User Management — users, groups, invitations, and the audit trail (Manage Users).
- Integrations — connect GitHub so EnforceAuth can read policy sources (Manage Integrations).
Coming soon: Alerts & Notifications, Admin Analytics, Billing.
User Management
/system-settings/users — Manage who has access to EnforceAuth and what they can see

Tabs: Groups · Users · Invitations · Audit trail. Filter users by Status, User Group, and Entities. Add User invites one person; Bulk Import onboards many. The Audit trail tab is where EnforceAuth records who changed what — it lives here, not as a separate top-level page.
Integrations (GitHub App)
/system-settings/integrations — Connect third-party services so EnforceAuth can read policy sources on your behalf

GitHub: "Install the EnforceAuth GitHub App on your organization so policy_source rows can read private repositories without per-user PATs. Supports github.com and GitHub Enterprise Server." Click Connect GitHub to start. This is the recommended way to authorize policy-source access — it avoids personal access tokens and survives individual users leaving.
See also
- EnforceAuth User Guide — task steps for every page above.
- Onboarding Guide — the sequenced path that touches these pages in order.
- Your First 10 Minutes — the fastest route to a live bundle and first decision log.