access-management
Safeguard articles tagged "access-management" — guides, analysis, and best practices for software supply chain and application security.
6 articles
An Engineer's First Week Sets Their Access for Three Years
Whatever they are granted on day two, they keep, because nothing removes it and asking for less is not a thing people do. The decisions get made by whoever is unblocking them at the time.
Nobody Decided That Everyone Should Have Production Access
It was obviously right at eight people and nothing has forced a decision since. At some point the number who can read every customer's data stops being one you would say out loud, and nothing breaks to tell you.
The Contractor Offboarding Nobody Ever Did
Every offboarding process is triggered by a termination event in a directory. A contractor's engagement ending produces an invoice, not a directory change, so nothing downstream fires and the account stays live.
Disabling the SSO Account Did Not Remove Their Access
SSO centralises authentication. It does not end existing sessions, revoke tokens issued through other paths, or touch the tools that were never federated. Deprovisioning is a credential problem, and credentials outlive identities by design.
Checkmarx Login: SSO, SAML, and Secure Access Explained
How the Checkmarx login works across the web console and IDE plugins, why SAML single sign-on is the right default, and how to keep access secure.
How to rotate SSH keys safely
A step-by-step guide to rotating SSH keys without downtime: inventory existing keys, generate new pairs, cut over safely, revoke old keys, and verify nothing was missed.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.