Password protection
Support for password-strength rules and checks against known compromised passwords helps reject weak credentials at signup and reset.
Security belongsin the foundation.
The controls behind your app should work together, too. Moora brings login, access, and credentials into the same system.
Three controls.
One foundation.
Know who is signing in, which apps they can use, and how those apps connect to your services. Explore each layer in the preview.
Managed identity Deliberate app access Authenticated connections
Start with a verified identity.
Managed sign-in establishes who is requesting access before the app opens.
- Sign-in
- Identity checked
- Session
- Time-limited
- Next step
- Check app access
Identity verified
Give every app a guest list.
Signing in and having permission are separate decisions. Choose the people and groups each app is for.
- Product team
- Allowed
- Operations
- Allowed
- Outside the app’s groups
- Restricted
Access follows your rules
A managed path to your services.
Use authorized service connections for your app’s requests. Keep the credentials managed in one place.
- Connected service
- Salesforce
- Action
- Read customer record
- Credentials
- Centrally managed
Authenticated connection
Interactive illustration. Sample identity, groups, and connection.
A stronger front door.
A familiar way in.
Managed authentication brings modern sign-in capabilities into one flow, so every app does not need to reinvent login.
Multi-factor authentication
An authenticator-app code adds another check at sign-in when MFA is enabled, helping protect an account if a password is exposed.
Passkey sign-in
Passkeys use cryptographic proof tied to the sign-in site. When enabled, they offer a phishing-resistant alternative to passwords.
Session controls
Configurable session lifetimes and inactivity limits help keep a sign-in active only as long as it should be.
Company single sign-on
Supported SAML and OIDC connections let teams use their company identity provider and its existing sign-in policies.
Identity verification
Email verification and account recovery flows help confirm account ownership, with identity managed outside your app’s custom screens.
Authentication methods and policies depend on workspace configuration. Company SSO follows your identity provider’s authentication policies.
Protect the path
to your data.
Bring permissions and connections into the same system. Keep the choices clear, from the person opening an app to the service it calls.
01
Make access deliberate
Keep authentication and app permissions together. Give people access to the apps they need, with a clear place to manage those decisions.
02
Keep credentials centralized
Manage service authorization in one connection flow. Reduce the need to copy and maintain separate credentials across your apps.
03
Limit what connections can do
Authorize the permissions your app needs. Read and write capabilities follow the connected service’s API and the permissions granted to it.
Enterprise only
Built for your next security review.
For organizations with formal assurance requirements, Moora’s Enterprise roadmap includes a dedicated compliance program.
ISO 27001
PlannedInformation security management
Planned certification of an information security management system, covering how security risks are assessed, managed, and reviewed.
SOC 2 Type II
PlannedIndependent assurance over time
A planned independent examination of relevant controls and their operating effectiveness over a defined period.
ISO 27001 certification and the SOC 2 Type II examination are planned, not yet completed. The related compliance offering is intended for Enterprise only.
Explore EnterpriseSecurity,
clearly explained.
Does signing in give someone access to every app?
No. Login establishes identity. App access determines which apps a person or group can open. Moora brings both into the same workspace.
Are all login methods enabled for everyone?
Login methods and policies depend on workspace configuration. For company SSO, authentication requirements are controlled by the organization’s identity provider.
Does a connection give my app unlimited access to a service?
No. Available actions depend on the service, the connected account, and the permissions authorized for that connection.
Is Moora already ISO 27001 certified or SOC 2 audited?
Not yet. ISO 27001 certification and a SOC 2 Type II examination are planned. The related compliance offering is intended for Enterprise only; completed documentation will be shared when available.