MAGEN IAM Guard adds continuous identity assurance to the identity provider you already run. Your IdP decides who gets in. IAM Guard keeps checking who is still in the session and sends trust signals back when an operator changes, a session is taken over, or stolen credentials are replayed. It runs alongside existing IAM, or MagenTrust can serve as the identity provider and PKI, with or without smart cards.