Microsoft Entra organizational identity
Use the identity system your enterprise already governs as the organizational authentication anchor.
Enterprise signing
Bring your identity authority with you. Do not rebuild it inside the signing vendor.
SignumEra can use Microsoft Entra application roles for enterprise assignment while Rust remains authoritative for SignumEra permissions. A Microsoft Global Administrator is not automatically a SignumEra administrator.
Key controls
Enterprise control without unnecessary adoption friction.
Keep Entra, your meeting platforms and your system of record. Change the execution architecture rather than replacing the surrounding stack.
Entra application roles
Assign SignumEra.Admin, SignumEra.User or SignumEra.Auditor to users or groups; external claims are normalized into SignumEra roles.
Server-authoritative authorization
Rust—not menu visibility—enforces sensitive actions. Owner, Admin, Member and Auditor permissions remain application controls.
Graph only when the workflow needs it
Microsoft sign-in can use OIDC without broad Graph consent. Additional Graph permissions are requested only for deliberate Microsoft 365 workflows.
Exclusive system-of-record return
Finalized documents and configured evidence return to the explicitly selected system of record. Identity, Teams or Zoom context does not create an additional storage destination.
Reduced attack surface
Minimize unnecessary long-term document custody and keep the public signing layer focused on controlled execution.
Built in Gibraltar
Verified signing. Governed execution.
Minimize unnecessary long-term document custody and keep the public signing layer focused on controlled execution. Finalized documents and configured evidence return to the explicitly selected system of record. Identity, Teams or Zoom context does not create an additional storage destination.
Low-friction adoption