Skip to content

Suite3 modules

Identity & Intelligence

Secure every user and ask your portals anything

One identity service for staff, partners and machine accounts, an assistant that answers from the portals' own help and looks up live data, and a gateway for the outside systems you approve.

Request a demoSee the modules
AI AssistantIllustrative

How many FTTH customers in Pune are due for renewal this week?

1,284 FTTH subscribers in Pune expire in the next 7 days; 212 of them are on autopay.

From: CRM subscriptions · as of 09:40

  • SSO
  • Role: Billing manager
  • Region: West

About Identity & Intelligence

Identity & Intelligence is identity and access management software with an assistant and an API gateway on top. Security officers, platform administrators and integration teams use it to control who signs in and what they can do, to help staff find answers inside the portals and to let outside systems work with i2iCore under control.

i2i Identity & Access is the central identity service. It holds organisations, users, roles and permissions, issues the signed tokens other services verify and keeps an audit trail. It adds time-bound access requests, break-glass access, access reviews and a separate production access service with a browser SSH terminal. i2i AI Assistant is a chat assistant in the admin and partner portals that answers how-to questions and reads live data through read-only tools.

i2i APIs is a curated external gateway. Staff register each client, restrict it to approved source addresses and choose which endpoints it may call, and every call is throttled and logged. It offers subscriber and package operations for partner systems, device operations for the ACS and adapters for payment providers.

What you get done

Central identity and privileged access, an assistant for the portals and a controlled API gateway.

  • Roles, permissions and audit trails in one console
  • Privileged access to production without sharing passwords
  • An assistant with read-only tools that run as the signed-in user
  • An API gateway limited by client, source address and endpoint

Modules

Everything in Identity & Intelligence

Every module connects to the AAA and CRM core and shows up in i2i 360. Start with what you need and add the rest as you grow.

i2i Identity & Access

Control who can sign in, what they can do and who touched production

  • One-time-code sign-in hand-off between i2i consoles
  • Roles and permissions grouped by application and module
  • Time-boxed and emergency access with mandatory review
Explore i2i Identity & Access

i2i AI Assistant

An assistant in the admin and partner portals for how-to questions and live data look-ups

  • How-to answers with sources and the menu path
  • Read-only look-ups that run as the signed-in user
  • A separate help knowledge base for each portal
Explore i2i AI Assistant

i2i APIs

A controlled API gateway for partners, payment providers and device apps

  • Partner systems create and recharge subscribers by API
  • Each client limited by source IP and endpoint
  • Every gateway call audited, including rejected ones
Explore i2i APIs

Better together

How the Identity & Intelligence modules work together

  1. Sign users in once

    i2i Identity & Access issues the signed tokens that other services verify. A one-time-code hand-off lets a user move between registered i2i consoles without another password, and organisation entitlements cap what any role can grant.

  2. Answer questions as the signed-in user

    i2i AI Assistant calls its read-only tools with the caller's own token through the portal gateway, so it reads only what that person could already read. Help content is filtered by the caller's permitted menu, and it changes no data.

  3. Open the platform to outside systems

    A partner CRM, payment provider or app calls i2i APIs as a registered client. Clients sign in by client secret or as an identity-service user, and staff control the source addresses and endpoints each one may use.

  4. Review and audit

    Access requests, break-glass use and access reviews are recorded in the audit log with user, module, action and address. API calls are logged with their outcome, and production access launches are audited, whether allowed or denied.

FAQ

Identity & Intelligence: frequently asked questions

How does single sign-on work in this suite?

An authenticated user is given a one-time code that a registered i2i console redeems for a session, and signing out ends the shared session. It is a hand-off between i2i consoles, not a standards-based federation service, so ask us if you need to connect an external identity provider. Not every console is on it yet.

What multi-factor options are there?

The second factor is a six-digit one-time code sent by SMS or email. It is set per user, with organisation defaults for staff and partners. Ask us about other factors for your estate.

Can i2i AI Assistant change data?

No. It answers from the portal's help knowledge base and a fixed set of read-only tools for customers, renewals, revenue and tickets. Each answer shows its sources and the menu path, and each turn is stored with a helpful or not helpful rating so the team can find gaps in the help content.

Which AI providers does the assistant use?

You choose OpenAI, Azure OpenAI, Anthropic, Mistral or a compatible endpoint, and bring your own key, which is stored encrypted. You can test the connection from the configuration screen and change provider without changing the portals. The admin and partner portals use separate knowledge bases.

Are i2i APIs self-service?

No. Staff register each client, set the allowed source addresses and switch endpoints on or off. The gateway offers a curated set of subscriber, package and device operations plus payment and bill-payment adapters, not every screen of the platform. Swagger documentation and a searchable call log are included.

How is production server access controlled?

A separate production access service lets support staff launch an application with a one-time handle rather than a password and open a browser SSH terminal to registered servers. Grants have a time window; administrators can watch and end live sessions; every launch is audited.

Other suites