Identity & Endpoint

Identity & Access

Workforce and reporting-organisation identities · phishing-resistant MFA, adaptive access, just-in-time privilege and identity threat detection

Workforce identities

1,248

MLTFPD, BFIU and IT

RO users

6,420

62 banks, 19 MFS, 34 NBFIs, others

Service accounts

312

41 with interactive sign-in disabled

Privileged accounts

all just-in-time

Phishing-resistant MFA

91%

target 100% by Q2 2027

Identity threats · 7 d

4 MFA fatigue · 2 token theft

Sign-in methods · 30 days

Passkeys (device-bound)

63%

FIDO2 hardware keys

28%

Authenticator app with number matching

8.6%

SMS one-time code

0.4% · RO users only

Identity lifecycle

✓HR → IAM

Joiner

Account and baseline access

✓User

Enrol

Passkey and managed device

3Policy

Access

Adaptive, least privilege

4Approvers

Elevate

Just in time and recorded

5Managers

Review

Quarterly certification

6ITDR

Detect

Identity threats and session theft

7IAM

Leaver

Disabled within 15 minutes