Product

One control plane from identity intent to a working endpoint.

FreeSCIM receives lifecycle intent, governs trust and policy, writes to Linux authority, enriches the managed estate, operates physical workstations, brokers remote support, explains events, and protects its own operational data.

identity lifecycleLinux authorityfleet operationsremote supportevidence and recovery
FreeSCIM unified identity and infrastructure control plane
Product planes

A complete operating model, not a collection of disconnected tools.

Each plane has a distinct authority and safety boundary. FreeSCIM joins their status and evidence without collapsing credentials or responsibility.

01

Identity convergence

Users, groups, password delivery, FreeIPA writes, Linux login proof, mappings, drift, reconciliation, and replay-safe behavior.

SCIMpasswordFreeIPALinux proof
 02

Federation and access

SAML and OIDC trust, MFA handoff, claims, roles, sessions, logout, failed attempts, protocol readiness, and security controls.

SAMLOIDCMFAsessions
 03

Infrastructure control

Foreman, Puppet, rooms, seats, WoL, SSH, VNC, Guacamole, and dedicated relay paths.

factsroomspower
 04

Living topology

Authority, protocols, physical placement, health, remote paths, and drill-down evidence.

maphealthpath
 05

Security intelligence

Correlated logs, trust posture, failed attempts, remote-session evidence, threats, and remediation.

correlationimpactnext action
 06

Database control

Living ERD, schema audit, migration preview, backup-first maintenance, retention, pruning, and survivability.

ERDbackuprecovery
Operating lifecycle

High-impact actions move through a deliberate sequence.

The same operating rhythm applies whether the action is a directory write, workstation power command, remote session, migration, or recovery operation.

DiscoverCurrent truth
PreviewImpact and policy
ExecuteBounded action
ProveObservable result
RecoverSafe next state
Who it serves

Different teams see one shared operational truth.

FreeSCIM is designed to reduce handoff loss between identity, security, Linux, infrastructure, support, and audit responsibilities.

Identity teamsProvisioning, passwords, mappings, federation, sessions, and lifecycle evidence.
Security teamsTrust paths, failed attempts, suspicious patterns, boundaries, and remediation.
Linux platform teamsFreeIPA, Kerberos, HBAC, SSSD, hosts, and downstream proof.
Infrastructure operatorsForeman, Puppet, rooms, seats, power, relays, and console access.
Support teamsReachability, selected jump path, session launch, blocker, and action owner.
Auditors and service ownersApprovals, correlations, migrations, retention, outcomes, and recovery evidence.
Precise by design

Power without blurred boundaries.

FreeSCIM does not read standing passwords, bypass FreeIPA policy, expose permanent VNC listeners by default, pretend inferred topology is live traffic, or declare a new environment proven without environment-specific evidence.

Review the verified matrixInspect the trust model