AR-GEActiveR&D Product
Kimlock
Kimlock is identity management software that takes records from student information systems, HR and personnel systems and other source systems and consolidates each person into a single identity keyed by their national ID number. A person’s different roles are kept as separate accounts under one user; accounts are provisioned in OpenLDAP, Active Directory, Zimbra and Google Workspace. Users sign in once over SAML 2.0 to Microsoft 365 / Entra ID, Google Workspace and services in the eduGAIN federation, and use the same identity for Wi-Fi and VPN over RADIUS; sign-ins can be protected with multi-factor authentication by SMS, email or an authenticator app. Password tasks are self-service, verified by SMS or email code.
92+Features
13+Tech Details
7/24Support
MartaDeveloper
Developed by Marta Teknoloji
Mersin Technopark — R&D
Features & Capabilities
01
6 featuresIdentity records
- Individual and legal-entity identity types
- Unique record by identity type and number
- Multiple phone numbers (mobile, work, home etc.) and email addresses
- Identity photo
+2 more
02
8 featuresUsers and accounts
- One user per identity; a separate account record per role
- User types in a tree (staff, student etc.)
- User tags
- Active, passive, semi-passive, blocked and provisioning states
+4 more
03
9 featuresDeduplication and data import
- Integration with student information systems and HR/personnel systems
- Import of student, staff and unit records from REST sources
- Merging source records into one identity by national ID number
- No-code field mapping, fixing and default value rules
+5 more
04
5 featuresUnits
- Units and unit types in a tree
- Unit names in Turkish and English
- Listing users by unit
- Default directory settings per unit
+1 more
05
13 featuresSingle sign-on (IdP)
- SAML 2.0 single sign-on and single logout
- Second-step sign-in verification with an SMS or email code
- Multi-factor authentication with an authenticator app (TOTP)
- Artifact resolution service
+9 more
06
7 featuresSelf-service portal
- Password change
- Forgotten password reset
- Forgot my username: with ID number and configurable verification fields
- Verification code by SMS or email; time limit and three attempts
+3 more
07
13 featuresDirectory and email integrations
- OpenLDAP server definition and connection test
- Create, update and delete users in OpenLDAP
- Units created as OUs in OpenLDAP
- LDAP attribute mapping per user type
+9 more
08
6 featuresMail groups
- Managing Google Workspace and Zimbra mail groups from one interface
- Mail group definitions per domain
- Membership from units, user types and tags
- Adding individual members and excluding users
+2 more
09
5 featuresSMS and email
- Net GSM, Turatel and Sanal Santral SMS accounts; connection test
- SMTP email accounts and priority order
- Per-language editing of verification and notification texts
- Bulk SMS lists and sending
+1 more
10
7 featuresAPI access
- Username and password verification endpoint
- Unit query and insert endpoint
- Endpoints for student, staff and password operations from the source system
- API accounts restricted by IP address
+3 more
11
6 featuresAccess control and reports
- IP allow-list for the identity provider and admin panel
- Session and event logs
- User action log: verification, password change and reset
- Administrator action log
+2 more
12
7 featuresSettings and policies
- Domains
- Role definitions and permission tree
- Admin panel users, activation and deactivation
- Password policy per user type
+3 more
Technical Details & Architecture
1
Foundation: The SAML layer is built on open-source SimpleSAMLphp; the applications use Phalcon 4 (PHP 7.x), the database is PostgreSQL and the interfaces are React. The identity model, data import, admin panel and integrations are product-specific2
Identity matching: Identity type and number (national ID) as unique key; one user per identity and one account record per role3
Protocols: SAML 2.0 identity provider (SSO, SLO, artifact resolution); RADIUS; JSON REST API4
Multi-factor authentication: SMS or email verification code; time-based one-time code (TOTP) with an authenticator app5
Data import: Student information system, HR/personnel system and other REST sources; configurable field mapping; add/update/delete by change comparison6
Directory and email: User, OU and group provisioning in OpenLDAP, Active Directory and Azure AD / Entra ID; mailbox and group management via Zimbra SOAP and Google Workspace7
Federation: SAML 2.0 federation with Microsoft 365 / Entra ID and Google Workspace; eduGAIN participation via the national federation’s metadata8
Account recovery: SMS or email verification code; time and attempt limits; reCAPTCHAInterested in this product?
Schedule a live demo or request a technical brief from our team.
SSOsingle sign-onkimlik doğrulamaLDAPActive Directory
Other Products
Active
LogHane
Cloud-based log retention for Law 5651: FortiGate logs are sealed hourly in the cloud without a server, timestamped and kept in a delete-proof archive.
View
Active
DNS / Web Filtering
DNS filtering software that blocks harmful content and inappropriate websites at the network layer.
View
Active
Lucia Network Analysis
Lucia Network Analyzer is a network monitoring system that discovers devices such as switches, routers, firewalls, servers, wireless access points and printers over SNMP, tracks their status, port traffic and hardware health, and raises rule-based alerts.
View
Active
Rosa SIP Firewall
Rosa SIP Firewall sits between the IP PBX and the internet and carries all SIP traffic through itself.
View