Frequently Asked Questions

Key is a centralized identity and access platform: single sign-on, multi-tenant organization management, role-based access control and federation with corporate identity providers.

OpenID Connect and OAuth 2.0 for applications, and SAML 2.0 alongside OIDC for federating external identity providers — all standards-based, no proprietary lock-in.

Yes. Each customer organization can federate its corporate identity provider; users are routed to the right flow based on their e-mail domain and arrive with the correct organization membership.

Yes — one-time codes via authenticator apps, with per-realm policies for when MFA is required, plus brute-force detection and account lockout protection.

Roles and organization membership are embedded in the tokens issued at sign-in. Applications read them from the token — no extra authorization round-trips for the common cases.