10 docs tagged with "enforceauth"

API keys are service identities that let OPA/EOPA instances and automation report decision logs and status to EnforceAuth. They are scoped to an entity and carry explicit permission scopes.

A bundle destination is where EnforceAuth publishes OPA bundles after a successful deployment. Your PDPs (OPA, EOPA, or sidecars) pull bundles from this location.

A deployment is how EnforceAuth turns Git policy sources into OPA bundles at your bundle destination. The Deployments page is the audit trail: who triggered what, for which entity and environment, and whether the pipeline succeeded.

Deep dive after the 15-minute quickstart. For architecture decisions first, read Your Policy as Code journey.

EnforceAuth provides an enterprise authorization control plane designed for production environments — governance, policy lifecycle, versioning, multi-environment promotion, rollback, auditability, compliance evidence, decision telemetry, operational visibility, and enterprise support.

EnforceAuth organizes authorization work under entities — a hierarchy of organizations and systems that own policy sources, bundle destinations, environments, secrets, and API keys.

EnforceAuth fits into the same Git workflow you use for application code: push Rego changes, run tests in CI, deploy bundles to your bundle destination, and track every run on the Deployments page.

Most onboarding failures during GitHub and S3 setup are customer-side configuration issues — wrong repo access, branch name, bucket policy, or IAM permissions. EnforceAuth logs the underlying error, but you only save time when you know which surface shows it.

The Policies page is your operational view of authorization policy across every system in the tenant. Use it to understand coverage, find errors, and open the Git-backed editor when you need to change Rego.

A policy source tells EnforceAuth where your Rego (and related policy files) live. On every deployment, the platform fetches from this source, runs tests, builds an OPA bundle, and publishes to your bundle destination.