Kinde Features

Users can request access to an application and be automatically provisioned if they meet policy requirements

Automates account/access rights creation, changes and removals for on-premise and cloud apps

Establish roles that create a set of authentication rights for each user in the role

Enables administrators to create access policies and applies policy controls throughout request and provisioning processes

Terminate access to multiple applications based on dates

Allow business stake-holders/managers to approve or reject requested changes to access via a defined workflow

Enables users to reset passwords without administrator interaction. Enforces password policies when resetting.

Change users and permissions in bulk

Alerts administrators when inappropriate access occurs

Standard and customized report creation to ensure appropriate access rights have been assigned

Support for wide variety of cloud and on premise apps to automate provisioning for existing and new applications procured

Provides appropriate application interfaces to enable custom integrations for unique business requirements

Sends a one-time passcode (OTP) via SMS.

Provides a one-time passcode (OTP) via voice-call.

Sends a one-time passcode (OTP) via email.

Supports hardware tokens, which are often USB-sized, fob-like devices that store codes.

Offers software tokens, which are applications installed on a mobile phone, wearable devices, or desktops and generate time-based one-time passcodes (TOTP) that a user can easily copy. Software tokens work both online and offline.

Allows biometric factors such as fingerprints, faceprints, voiceprints, or other biometric information to be used as an authentication factor.

Offers mobile push authentication, which is a user-friendly method that does not require a user to copy a code, but rather accept or deny an authentication using a mobile application. Mobile push authentication only works when a user is connected to the internet.

Analyzes users' IP addresses, devices, behaviors and identities to authenticate a user.

Offers encrypted backup recovery stored by the vendor.

Enables a seamless customer experience with self-registration and self-service functions, including account creation and preference management.

Verifies user identity with authentication, which may include multiple multi-factor authentication methods.

Scales to support growing a customer base.

Captures and manages a customer's consent and preferences to comply with data privacy laws such as GDPR and CCPA.

Offers users the option to sign in with social media accounts.

Integrates with directories or other data stores that house customer data to create a complete view of a customer.

Ability to create and send invoices automatically at predefined or custom frequencies.

Consolidate invoices so customers can make one payment for multiple bills.

Adjust invoices to handle exceptions and correct errors.

Allows users to temporarily or permanently block potential fraudsters.

Assists users in collecting payments for unpaid invoices.

Manages disputes regarding billing and payments.

Define escalation processes to suspend service for unpaid invoices.

Track the financial performance of various types of packages.

Identify the impact of special pricing and discounts on revenue.

Monitor plan changes such as upgrades and downgrades, or cancellations.

Offers an easy to understand user interface to make setup smooth.

Offers a mobile software development kit (SDK) for iOS, Blackberry, and Android.

Offers a software development kit (SDK) for web-based applications.

Reports revenue based on various dimensions, such as subscription segments, geographies, or discounts

Tracks revenue for goods or services that have yet to be collected

Accurately determines and reports the accounting period when revenues are recognized

Track customer's usage data based on the services they have subscribe to

Connect to data sources to pull/push usage based data via data-source-specific connectors or APIs

Create and send usgae based reports such as product usage, free units, etc to clients

Provide standard document templates for Invoice, payment, refund and contracts

Ability to convert invoices to digital formats such as PDF

Automatically generates invoices based on the service usage

Allow users to consolidate multiple invoices into one

Ability to create multiple types of invoices

Manage invoicing for different types of products or services

Provide integration with accounting and financial management software

Integrate with payments software to facilitate payments

Deliver integrations with accounting modules of ERP systems

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Improves performance based on feedback and experience

Possesses AI-driven triggers to determine when to require MFA or stronger authentication rather than always requiring it.

Builds profiles of known devices/environments per user and flags deviations such as new devices, new networks, and/or suspicious locations as higher risk.

Spot fraudulent behavior, such as account takeover attempts, credential stuffing, bots, and brute force attacks through the use of AI.

Uses machine learning to analyze past authentication events and suggest optimizations to security policies (e.g. thresholds, triggers) or to adjust rules over time.

Leverages AI to assign a risk score to a login attempt based on context, device, IP, historical patterns to dynamically decide whether to prompt for MFA, additional challenges, or allow seamless login.

Monitors behavioral signals including typing patterns, mouse movement, and/or touch/swipe dynamics to verify user identity either at login or continuously after login.

Uses computer vision, facial recognition, or other biometrics during onboarding or at risk events, with AI-based liveness checks to prevent spoofing or replay attacks.

Generates dynamic prompts to guide users through account recovery workflows.

Implements artificial intelligence to filter, rewrite, or block prompts that attempt to access unauthorized data, escalate privileges improperly, exploit system weaknesses, or otherwise re-provision customer access permissions.