ENTERPRISE · IDENTITY FIRST

Identity first.Equinox and Talon sign in through it.

Auris connects to your identity provider through SAML or OIDC and provisions people with SCIM. Equinox and Talon take their permissions from it, and the audit log can stream to your own tools.

Configure your solution See the pieces

Explore the architecture

SSO, SCIM, roles, audit

Architecture illustration. Select a component to explore its role.

IN THE PRODUCT

Four things you can check.

SSO: SAML · OIDC
Per organisation, with domain verification.
PROVISIONING: SCIM 2.0
Users, groups and bulk operations.
AUDIT STREAMS: 4 targets
Webhook, S3, Datadog and Splunk, with retries and a dead-letter queue.
ROLES: Stackable
Custom roles at tenant and organisation level, on top of fine-grained, relationship-based permissions.

THE SITUATION

Where enterprise rollouts stall.

Not on features. On the edges.

The directory is the source of truth: People join, move and leave in your identity provider. Every application that keeps its own user list is a gap.
Security wants the log in its own tool: An audit trail that only exists inside the product does not get reviewed. It has to arrive where the analysts already look.
Approvals cross departments: A purchase or a document passes through several people, and someone is always away. Delegation has to be part of the flow, not a workaround.

THE PIECES

Four pieces, each with its own page.

Identity first, then the systems that sign in through it.

01 IDENTITY

Auris

SSO, SCIM, roles, audit

Passkeys, magic links and SSO through SAML or OIDC. SCIM 2.0 provisioning. Roles, fine-grained permissions, and an audit log with export and streaming. Each customer is a separate tenant.

Open Auris

02 ERP

Equinox

Approvals and permissions

Permissions per action through Auris, approval workflows with delegation, a REST API with keys and outbound webhooks, over quotes, invoices, accounting and purchasing. Built around Italian invoicing.

Open Equinox

03 HELPDESK

Talon

The service desk

Tickets, teams, SLA policies, a knowledge base, a REST API with OpenAPI and webhooks. An AI front desk triages email and chat and asks before it acts.

Open Talon

04 HOSTING

Altovar Cloud

Servers, storage, databases

Cloud VPS, dedicated servers, object storage, Storage Box and managed databases, ordered by region and billed monthly.

Open Altovar Cloud

FROM THE PRODUCT

An approval, as the approver sees it.

Pending documents wait in one queue. The approver accepts or rejects each one.

EquinoxInteractive preview

Workspace

Approvals

Pending 1

All document types

Document	Amount	Requester	Status	Actions
Purchase order`PO-2026-042`	€2,480.00	Nora	Pending

Interface reconstruction with sample data. Actions stay on this page.

Capabilities at a glance

Each component has a clear role.

Compare the pieces and what each one covers before defining your project.

Each component has a clear role.
Component	Role	What it covers
Auris	SSO, SCIM, roles, audit	Passkeys, magic links and SSO through SAML or OIDC. SCIM 2.0 provisioning. Roles, fine-grained permissions, and an audit log with export and streaming. Each customer is a separate tenant.
Equinox	Approvals and permissions	Permissions per action through Auris, approval workflows with delegation, a REST API with keys and outbound webhooks, over quotes, invoices, accounting and purchasing. Built around Italian invoicing.
Talon	The service desk	Tickets, teams, SLA policies, a knowledge base, a REST API with OpenAPI and webhooks. An AI front desk triages email and chat and asks before it acts.
Altovar Cloud	Servers, storage, databases	Cloud VPS, dedicated servers, object storage, Storage Box and managed databases, ordered by region and billed monthly.

Your project

Define your starting point.

Choose the components you want to discuss. The summary follows your selection.

HOW IT STARTS

A rollout in four moves.

01
Connect your identity provider

Add your SAML or OIDC provider to an Auris organisation and verify the domain.
02
Turn on provisioning

Point SCIM at Auris so people and groups follow your directory.
03
Map roles to permissions

Create roles at tenant and organisation level and attach the permissions each product exposes.
04
Send the log where it is read

Stream the audit log to your own tools and keep an export for audits.

QUESTIONS

Questions we get.

Do you sync with LDAP or Active Directory?

No. Use SCIM or SSO from your identity provider. There is no direct directory sync.

Can people sign in with SPID or CIE?

No. Those sign-in methods are not available.

How many users can it carry?

We have not published a benchmark and will not quote a number we have not measured. Tell us your size and we will say what we have and have not tested.

Is there a limit on tenants?

Self-service accounts can own five tenants and create three a day. Beyond that, talk to us.

Which certificates do you hold?

None. Altovar holds no ISO or SOC certificate today. Comply, in the NIS2 and DORA solution, helps you prepare yours.

WHAT THIS PAGE DOES NOT PROMISE

Read this before you plan around it.

These are the limits, stated before you ask.

No directory sync

LDAP and Active Directory are not synchronised. SCIM and SSO are the supported routes.

No national ID sign-in

SPID and CIE are not available.

No certificates, no contractual uptime

Altovar holds no ISO or SOC certificate, and this page quotes no SLA. Terms are agreed in the contract.

Equinox is built for Italy

Invoicing and accounting follow Italian rules, including FatturaPA to SdI. It is not a pan-EU tax engine.

Bring your identity provider and your headcount.

We will show the integration on a test organisation and say plainly what has not been tested at your size.

Talk to us All solutions