Authifi Service - Security Documentation¶
Overview¶
This directory contains guidance for configuring and operating Authifi administrative accounts in accordance with FedRAMP Recommended Secure Configuration requirements.
Security Admin Guide¶
Document: Security Admin Guide
The Security Admin Guide covers administrative account setup, configuration, operation, and decommissioning.
Administrative Account Types Covered¶
| Account Type | Description |
|---|---|
| Super Administrators | Top-level administrative accounts with platform-wide control |
| Tenant Administrators | Privileged accounts with full control within a single tenant |
| Delegated Admins | Users with specific elevated permissions for particular resources |
Key Topics¶
- Administrative account role definitions (permissions, actions, operations)
- Account lifecycle procedures (setup, MFA requirements, configuration, decommissioning)
- Security settings reference tables with recommended values
- FedRAMP compliance mapping
Recommended Secure Configuration¶
Document: Recommended Secure Configuration
The Recommended Secure Configuration guide covers:
- Authentication and session management settings
- Identity provider security configuration
- Role-based access control (RBAC) settings
- Data protection and encryption
- Monitoring and audit configuration
- Recommended security practices
- Compliance checklists
Quick Reference¶
For Super Administrators¶
- Super Administrator Role Definition
- Super Administrator Lifecycle
- Super Administrator Security Settings
For Tenant Administrators¶
- Tenant Administrator Role Definition
- Tenant Administrator Lifecycle
- Tenant Administrator Security Settings
For Delegated Admins¶
Related Documentation¶
- Tenant Administrator Guide - UI-focused tenant settings guide
- Super Admin Access Requirements - Complete list of super-admin-only operations
- Admin Roles Overview - Technical role implementation details
Classification: Public
Last Updated: 2026-01-22