Velaxe
AccessGuard — IAM with JWT, MFA, RBAC & SSO (SAML/OIDC) | Velaxe

AccessGuard

Build consent & privacy records

Capture terms acceptance, marketing preferences, and retention rules.

18 min Beginner Compliance Officer, Product Manager Updated Sep 19, 2025

Overview

Capture terms acceptance, marketing preferences, and retention rules.

Prerequisites

None.

Permissions required

profiles:write consents:write

Downloads & Templates

Steps (3)

Estimated: 18 min
  1. 1

    Define consent types

    Compliance 5 min Back to top

    Settings → Privacy → Consents. Add “terms”, “privacy”, “marketing”.

    Tips

    Validation

    Success criteria

  2. 2

    Add UI prompts

    Product 6 min Back to top

    Enable prompts on registration/login; link to latest policy versions.

    Tips

    Validation

    Success criteria

  3. 3

    Verify capture & export

    Compliance 7 min Back to top

    Create a test account; review Profile → Consents; export CSV for audit.

    Tips

    Validation

    Success criteria

    • All records show timestamp, IP, user agent, and policy version.

About this guide

AccessGuard secures apps and external sites with hosted authentication and short-lived JWTs. Enable MFA, define RBAC permissions, and connect enterprise identity via SAML or OIDC. A lightweight HMAC bridge lets you embed login, registration, and token refresh flows on any domain without CORS pain.

Admins manage users, sessions, connections, and policies from one console. Profiles consolidate verified emails/phones, consents, KYC docs, and risk flags. Events and metrics provide visibility for security and ops.

Designed for velocity and safety: opinionated defaults, least-privilege keys, Prometheus counters, and exportable audit logs.