Skip to main content
Geographic location is not used as an authentication factor. Authentication is managed through credentials, SSO (SAML 2.0/OAuth 2.0), and optional MFA (TOTP-based). IP-based access restrictions can be configured as an additional control.
Geographic location is not used as an authentication factor. Authentication is managed through credentials, SSO (SAML 2.0/OAuth 2.0), and optional MFA (TOTP-based). IP-based access restrictions can be configured as an additional control. Learn more: Xoxoday Help Centre — Technical requirement

Does Xoxoday have a Policy Enforcement Point capability to enforce regional...

A dedicated XACML-based policy enforcement point is not implemented…

Does Xoxoday have a cryptographic key management process?

Xoxoday implements a documented cryptographic key management process covering generation, storage, exchange, and rotation for all system components…