Your workspace
This is your user view. Product user features are not available yet. Your administrator manages access as each tool becomes available.
NIDAVARDCOMMAND
GUARD EVERY GATEWAY
Enter your realm.
Checking sign-in configuration…
Sign in with Microsoft Entra →
Nidavard Security · Authorized access only
NIDAVARD / USER WORKSPACE
Your tools.
NIDAVARD COMMAND / MANAGEMENT CONSOLE
Your realm.
Within reach.
Prepare browser policy and inspect local API device records. Chromium integration is pending.
Browser fleet
THE BOUNDARY / WORKSPACE POLICY
Workspace policy stored by the local management API.
Recent activity
BIFROST
Browser fleet
Enrollment, last check-in, and reported policy revision.
TOOL CONFIGURATION / BIFROST
Browser configuration
Configure browser identity, site access, data protection and browser experience.
All Bifrost installations
01 / IDENTITY
Browser sign-in and enrollment
Manage the identity behavior of Bifrost installations. Configure the platform identity provider in Platform settings →
Entra ID federation through SAML 2.0, with SCIM user provisioning. Device registration and browser accounts have separate lifecycles.
Federation & registration
First successful SAML sign-in can register an installation automatically. Native Chromium integration and OS pass-through SSO have not been implemented.
ACCOUNT CHOICE
Continue as you. Or someone else.
The planned native browser offers your OS account, interactive sign-in, and a separate profile for another account. A local username alone never proves identity.
Windows and macOS require compatible enterprise SSO configuration. These choices are a protocol contract, not working native browser controls.
AUDIT ACTIVITY
The record of your realm.
Local records from the console and enrolled browsers. Navigation records contain origins only.
COMMAND / PLATFORM SETTINGS
Platform settings
Configure access to this Command workspace and its shared identity services.
Platform administration
Identity provider & provisioning
Configure the shared SAML trust and SCIM account source. Console administrator sign-in uses this trust; Bifrost also uses it for browser sign-in.
Console administrator access
Assign Command administrator access to active, provisioned accounts. Browser sign-in and product participation do not grant console administration.
Foundry staff access is managed independently.
Provisioned accounts
SCIM Users subset · groups pendingTool configuration
Browser enrollment behavior, secondary accounts, sites, downloads, printing and homepage belong to Bifrost configuration.
NIDAVARD COMMAND / LICENSING
Independent products. Clear counts.
Each product has its own purchased identity capacity and active identity count. Accounts, devices, sessions, and directories do not create additional seats for a correlated identity.
Local development customer. The initial Bifrost entitlement is a synthetic trial capacity of 10 identities. No commercial purchase, billing, or production subscription is represented.
Product capacities
Counted identities and reconciliation
Command manages participation. Internal Foundry staff manage purchased capacity through a separate authorization boundary. Security-policy sync and audit collection continue when an entitlement expires.
Connect a Bifrost browser
This one-use API enrollment code expires in 10 minutes. Native Chromium enrollment is not implemented yet.