Features Security

The questions IT will ask, answered

A screen on a wall is a device on a network with a view of a room. The people who have to sign that off deserve better than a marketing page that says 'enterprise-grade'.

SSO is an Enterprise feature; audit and scoped keys are on signage plans.

Who gets in

Single sign-on through OIDC, so accounts are created and removed where your identity provider says they are. Roles limit what each person can reach — a menu manager need not be able to unpair a screen — and sessions can be revoked centrally.

  • OIDC single sign-on
  • Roles, including narrow ones
  • Session revocation from the console

What was done, and by whom

An audit log records the actions that matter — who changed a scene, who sent a broadcast, who revoked a key — with a timestamp and an actor. It is the record that turns 'the screen said something odd on Tuesday' into an answer.

What is stored

Credentials for connected systems are encrypted at rest and never returned to a browser once saved. Face recognition, where it is used at all, runs on the device and uploads no images. Screens hold a device token rather than an account password, so a stolen panel is revoked rather than a breach.

Where people use it

A procurement review

SSO, audit and data handling described plainly enough to attach to the paperwork.

A leaver

Removed in your identity provider, and out of the console at the same moment.

Questions

Do you support SAML?

OIDC today. If SAML is a requirement, tell us before you buy rather than after.

What does a screen actually hold?

A device token scoped to that screen, which can be revoked on its own. Not an account password.

Where is data held?

In our UK/EU infrastructure. Home Assistant traffic never leaves your own network at all.

Put it on the wall

Start free on one screen. No card until you add a second.