> Source: https://complior.se/en/idp/

03 / Identity & access 

# The right identity. 
The right access. 

Control who has access and under what conditions. With IDombud, identity, sign-in and permissions remain connected over time. 

[See IDombud's services ↗](https://idombud.se/) [Understand the chain of trust ↓](https://complior.se/en/idp/#ia-chain) 

03 

Identity & access Part of Complior's chain of trust 

How the components fit together 

## From identity 
to the right access. 

Who is the person, how is their identity verified and what are they allowed to do? Four parts need to work together. 

- 01 

### Identity 

An identity is linked to the person and the organisation. Issuance and revocation need to be controlled. 

- 02 

### Authentication 

At login, the person proves their identity using a method that meets the service's requirements. 

- 03 

### Assertion 

Verified identity information is passed to the connected service. The assertion provides input; the service applies its access rules. 

- 04 

### Permissions 

Roles, decisions and rules determine what the person may do. Access needs to be adjustable and revocable. 

Conceptual explanation. Flows, integrations and responsibilities are defined for your environment. 

Throughout the lifecycle 

### Control even when roles change. 

Manage identities and access when someone joins, changes role or leaves. IDombud provides support through automation, self-service and recurring reviews. 
[About the identity lifecycle at IDombud ↗](https://idombud.se/hantera-identiteter/) 

Complior's three capabilities 

## The person, the information 
and the systems. 

Within IDombud, Fortified ID provides the IAM platform and Complior provides Swedish infrastructure and operations. 

You own your data and decide who has access. 

- 01 / INFRASTRUCTURE 

### Where are the systems? 

Compliant Cloud provides a Swedish platform and operations on Complior's own infrastructure. 
[Compliant Cloud →](https://complior.se/en/compliant-cloud/) 

- 02 / DATA PROTECTION 

### How are the keys protected? 

KMS and HSM provide control over encryption keys, depending on the environment and integration. 
[Data protection & key control →](https://complior.se/en/key-management/) 

- 03 / IDENTITY 

### Who has access? 

IDombud brings together identity, authentication and access management. Explore the details on IDombud's website. 
[More about IDombud ↗](https://idombud.se/) 

Continue at IDombud 

## Go deeper 
where you need to. 

Start with your needs. Explore services, use cases and technical information at IDombud, or book a review of your environment. 
[Book a review with IDombud ↗](https://idombud.se/boka-demo/) 
- [Secure login & Identity Provider Unified sign-in and federation for your applications. ↗](https://idombud.se/autentisering/identity-provider/) 

- [Your own electronic identity Control issuance and revocation for work and assignments. ↗](https://idombud.se/e-legitimation/) 

- [Identity management & self-service Manage users who join, change roles or leave. ↗](https://idombud.se/hantera-identiteter/) 

- [Access management & review Review who has access and why. ↗](https://idombud.se/identity-governance/)