CEDX 2026 Kernel Release: Single-tenant isolation, canonical Postgres schema, workflow bus, and immutable audit trail Explore the CEDX Identity architecture ->
CEDXSystems
EnglishTalk to sales
PLATFORM & IDENTITY CEDX Identity
Overview Users Access Workflow & Tour Operators TCO Model 14-Day Sandbox Live build ↗
PLATFORM & IDENTITY CEDX Identity · Platform · identity.cedxsystems.com

Every principal, scored. Every sign-in, explained.

Identity counts what most sign-in tools leave as opinion: 320 identities in the demo directory, MFA coverage at 81.4%, 80 privileged principals, and a posture score that tells you exactly which finding is holding it down.

Open live CEDX Identity -> Inspect 4-screen build tour
320 identities in the directory 80 privileged principals 81.4% MFA coverage Zero-ETL Shared Postgres Record
CEDX Identity Enterprise Architecture Briefing
CEDX Identity · 320 identities in the directory

"We started with one application to fix our most painful bottleneck, and added five more modules on the same login with..."

Arjun Patel · SVP of Global Operations · Keystone Logistics · 0.01s Canonical Sync
CEDX Identity reads and writes the exact same canonical Postgres record as CEDX Directory, CEDX Admin, and CEDX Entitlements with zero third-party webhooks.
🔒 https://identity.cedxsystems.com/workspace/live
CEDX Identity · Overview (A posture score with its working shown)
identity.cedxsystems.com · 01 - Overview · Live Canonical Dataset
● Overview Active · 0.011s Sync Open /app/identity ↗
IDENTITIES IN THE DIRECTORY
320
213 active
PRIVILEGED PRINCIPALS
80
admin + break-glass tiers
MFA COVERAGE
81.4%
73 principals weak or none
POSTURE SCORE
73
findings name what holds it down
Platform Subsystem / Node Canonical Schema Binding Tenant & RBAC Scope Throughput / Event Rate Cryptographic Audit SLA Availability
Canonical Entity Graph v26.4CEDX Identity · Record #1040 132 Apps · Shared Primary Keys Global Multi-Entity Root 48.2M Events / Day ● SHA-256 Chain Verified 99.995% Uptime
Workflow Deterministic BusCEDX Identity · Record #1041 Cross-App Triggers (CRM->Books) Zero-Middleware Execution 1,840 Workflows / Min ● Idempotent Replay Log 0.012s p99
Enterprise Directory & RBACCEDX Identity · Record #1042 418 Principals · 38 Roles SCIM + SAML + Passkeys Zero Standing Drift ● Every Grant Priced 100% Enforced
Immutable Compliance LedgerCEDX Identity · Record #1043 SOC-2 / ISO / GDPR Evidence Tamper-Evident Storage 100% Write Coverage ● Auditor Read-Only View Verified Live
✦ CEDX Identity Copilot · Canonical Entity Graph v26.4
Overview Verified
Posture health reads 73, and the panel says why: MFA coverage 81%, 213 active users, 53 high-reach principals, 56 failed auth events. Below it, findings arrive root-caused - admins without phishing-resistant MFA, counted at 30, marked critical.
CEDX Identity operator workspace in natural daylight
FIELD DOCUMENTARY · PLATFORM & IDENTITY

Who can get in, and on what factor

The critical finding on the Overview is not vague: 30 privileged principals can sign in with push or TOTP only. The fix is named on the same panel as the symptom.

CAMERA: CANON EOS R5 · 35MM F/1.4 · NATURAL DAYLIGHT ESTATE ROUTE: /APP/IDENTITY
CORE CAPABILITIES · CEDX IDENTITY

Three architectural jobs CEDX Identity gets right on one record.

Every capability below runs against the shared CEDX Postgres database with zero external sync queues or reconciliation lag.

01 · PLATFORM & IDENTITY FOUNDATION

Who can get in, and on what factor

The Users table carries tier, MFA method and last login on every row: 320 identities, filterable to Active, Suspended, Staged and Deprovisioned. The MFA column does not round - Phishing-resistant, App push, TOTP, SMS and None are five different answers, and 73 principals are still on the weak end of that list.

✓ 320 rows: user, dept, status, tier, MFA, apps, last loginVerified
✓ Tiers run Standard, Elevated, Admin - 2 break-glassVerified
✓ CSV export of the view you are actually looking atVerified
02 · LIVE EXECUTION

Which groups carry the risk

Access ranks 48 groups by a risk score, not by name: break-glass-holders scores 98 with 3 members and 56 apps; org-admins 94; mfa-exempt-legacy 86. Nested inheritance is counted separately - 20 groups inherit risk they did not ask for - and 9 high-risk groups sit in a review queue.

Which groups carry the risk
CEDX Identity Live Telemetry ● 320 identities in the directory
03 · DETERMINISTIC GOVERNANCE

What the sign-on policy actually does

The policy library is 10 policies and 29 rules, each typed Sign-on, MFA, Session or Password, each either enforced or flagged Needs review. Workforce MFA reads like a sentence: any workforce user → MFA required, phishing-resistant preferred - 4 rules, 38 apps, priority 10.

✓ 8 of 10 policies active and enforced; 2 in draft or reviewActive
✓ Rule stack viewable per policy, not just a toggleActive
✓ Geo anomaly block sits in Draft, visibly not enforcedActive
04 · VERIFIED DEMO DATASET METRICS

What the live CEDX Identity build looks like when you open /app/identity.

Every figure below is directly inspectable in the running CEDX Identity application workspace with zero synthetic projections.

IDENTITIES IN THE DIRECTORY
320
213 active
PRIVILEGED PRINCIPALS
80
admin + break-glass tiers
MFA COVERAGE
81.4%
73 principals weak or none
POSTURE SCORE
73
findings name what holds it down
4-SCREEN RUNNING BUILD TOUR

Four screens captured from identity.cedxsystems.com, in the order operators run them.

Click any screen below to inspect how CEDX Identity moves from initial intake to verified cross-estate completion.

01 - OVERVIEW
A posture score with its working shown
Posture health reads 73, and the panel says why: MFA coverage 81%, 213 active users, 53 high-reach principals, 56 failed auth events. Below it, findings arrive root-caused - admins without phishing-resistant MFA, counted at 30, marked critical.
02 - USERS
The directory as a table you can act on
Every identity - workforce and service - with department, status, tier, MFA method, app count and last login. Suspended and Staged are chips, not reports. A staged support account on SMS is visible in the same glance as an exec on phishing-resistant keys.
03 - ACCESS
Groups, scored by what they can reach
The group table shows members, apps, risk, nesting and owner together, so dyn-core-26 with 81 members and a 94 risk score reads differently from finance-approvers with 14 members at 72. Review dates are on the row - the queue is a list, not a calendar invite.
04 - POLICIES
Rules you can read before they fire
Ten policies, typed and prioritised: Password baseline, Session hardening, MFA enrollment grace, Break-glass monitor. The two that need attention - a grace policy in review and a geo block in draft - are amber on the list, not discovered after an incident.
01 - OVERVIEW · IDENTITY.CEDXSYSTEMS.COM

A posture score with its working shown

● Live Screen Capture

Posture health reads 73, and the panel says why: MFA coverage 81%, 213 active users, 53 high-reach principals, 56 failed auth events. Below it, findings arrive root-caused - admins without phishing-resistant MFA, counted at 30, marked critical.

✓ Auth success versus failure, daily, on one chartVerified in /app/identity
✓ MFA factor mix: 52 phishing-resistant, 54 with noneVerified in /app/identity
✓ Privilege tiers: 152 standard, 101 elevated, 65 admin, 2 break-glassVerified in /app/identity
A posture score with its working shown
OPERATING CADENCE · PLATFORM & IDENTITY

How CEDX Identity runs across the week, in the exact order work happens.

Platform governance is not bolted on after purchase: Admin, Directory, Workflow, Audit, and Vault form the substrate every CEDX app compiles against.

STAGE 01

Capture & Ingest

Records land in CEDX Identity already linked to the canonical customer, employee, or vendor ID.

STAGE 02

Score & Triage

Deterministic rules and auditable Copilot signals rank every item by financial and SLA impact.

STAGE 03

Execute & Approve

Operators resolve work in one click with role-based guardrails and instant cross-app writeback.

STAGE 04

Reconcile & Report

Every completed action updates live executive dashboards and the immutable audit log automatically.

OPERATOR WORKSPACES · WHO RUNS CEDX IDENTITY

Three roles open CEDX Identity every day. Each sees the exact surface they own.

Role-based views and permissions are enforced at the database row level so executives, managers, and frontline operators share one source of truth.

IT administration using CEDX Identity

IT administration

Owns the directory and the factor mix. Watches the 73 principals still on weak MFA and works the list down, staged account by staged account.

● MFA coverage · 81.4%
Security review using CEDX Identity

Security review

Works the high-risk group queue - 9 groups at 70 or above - and the review dates on the Access table, where break-glass-holders at 98 is the first row, not a surprise.

● review queue · 9
Compliance using CEDX Identity

Compliance

Reads posture findings as evidence: 30 admins without phishing-resistant MFA is a finding with a count and a fix, which is what an assessor asks for.

● policy pass · 97.2%
ONE CANONICAL RECORD ACROSS 132 APPLICATIONS

One Identity, One Data Model, One Permission Graph Under Every Application

CEDX Identity is not an isolated point tool. It reads and writes the exact same customer, ledger, and identity records as the rest of the CEDX software estate.

CONNECTED MODULE 01 Open /directory/ ->

CEDX Directory

The 320 identities Identity secures are the records Directory keeps clean - source system, orphan score and owner coverage on the same principals.
CONNECTED MODULE 02 Open /admin/ ->

CEDX Admin

The privileged tiers Identity counts are the seats and roles Admin prices and reclaims - 80 privileged principals is the same number on both consoles.
CONNECTED MODULE 03 Open /entitlements/ ->

CEDX Entitlements

Sign-on policy decides who gets in; Entitlements decides what their plan then turns on, flag by flag.
CONNECTED MODULE 04 Open /audit/ ->

CEDX Audit

Every sign-in, role assume and policy update Identity evaluates is an event Audit keeps - 124 admin-class events in the demo stream.
ARCHITECTURAL PROOF · OPERATOR PERSPECTIVES

Why enterprise operators replace stitched SaaS stacks with CEDX Identity.

"We started with one application to fix our most painful bottleneck, and added five more modules on the same login without a single migration project."

Arjun Patel
Arjun Patel
SVP of Global Operations · Keystone Logistics

"Consolidating onto CEDX eliminated four middleware connectors and cut our weekly forecast and close reconciliation from two days to twelve minutes."

Marcus Vance
Marcus Vance
Chief Revenue Officer · Meridian Systems

"When Sales, Operations, and Finance read and write the exact same Postgres record, month-end stops being a detective investigation across six spreadsheets."

Elena Rostova
Elena Rostova
Chief Financial Officer · Northline Group
LIVE TCO & CONSOLIDATION MODEL · PLATFORM & IDENTITY

Stop paying five vendors to re-sync the same platform & identity record.

Drag the seat slider to compare your current stitched stack (Okta Workforce + Workato + MuleSoft + Vanta + Splunk Audit) against running CEDX Identity natively on the unified CEDX estate.

Organization Seats 250 seats
25 seats 500 seats 1,250 seats 2,500 seats
Legacy Stitched Stack
Okta Workforce + Workato + MuleSoft + Vanta + Splunk Audit
$1,380,000 / yr
CEDX Identity + Full Estate Bundle
All 132 applications · Canonical Postgres · Unlimited Copilot
$267,000 / yr
Verified Annual Hard Savings
Plus 0 middleware sync failures
$1,113,000 / yr
TECHNICAL & PROCUREMENT FAQ · CEDX IDENTITY

Questions operators and architecture teams ask before piloting CEDX Identity.

01 Is the software on this page real? +
Yes. Every screenshot is a capture of the running build and you can open the same build at /app/identity . It runs on demo data, which the page says next to the figures rather than in a footnote.
02 What does the posture score of 73 actually measure? +
The panel shows its components: MFA coverage, active users, high-reach principals and failed auth events. The findings queue underneath names what would move it - 30 admins without phishing-resistant MFA is the critical one, and it is a counted list, not a trend line.
03 How are privileged accounts handled? +
Privilege is a tier on the identity, visible on every row: Standard, Elevated, Admin, and a break-glass tier that holds exactly 2 principals in the demo directory. The 80 privileged principals are counted on the Users header, and groups that grant privileged paths are risk-scored on the Access table.
04 Can we see what a policy will do before enforcing it? +
The policy library separates enforced policies from drafts and review states - 8 active, 2 needing attention in the captures - and each policy expands to its rule stack, type, app count and priority before you change anything.
05 Does Identity replace our existing sign-in provider? +
That is a pilot question, not a page claim. The captures show 56 SSO apps assigned across the demo estate and policy evaluation on sign-on; which systems of yours sit behind that is what the estate map conversation is for.
LIVE SANDBOX · ZERO MIDDLEWARE · NO CARD REQUIRED

CEDX Identity is running right now. Open it and inspect the record.

Explore the live CEDX Identity workspace on canonical demo data at /app/identity, or book a 30-minute architecture session to map your first entity rollout.

Open live CEDX Identity (/app/identity) -> Book an estate architecture map