Hierarchical Access Groups
Group membership and SSO assertions are ledger‑stamped. AccessGroupChanged and SsoAssertionRecorded entries make it possible to prove which group an actor belonged to — and which IdP authenticated them — at the moment of any historical action.
Magellan organizes schemas, mappings, and rules into hierarchical access groups that mirror your organization's structure.
Each group can have its own ownership, read/write permissions, and approval workflows, ensuring that the right people control the right assets.
Every group creation, membership change, and permission edit writes `AccessGroupChanged` to the ledger. Every SSO sign-in writes `SsoAssertionRecorded` carrying the IdP, assertion hash, and resolved Magellan role.
Integration with enterprise single sign‑on (SSO) means users authenticate with their existing corporate credentials — no separate Magellan passwords to manage.
RESTful service hosting allows Magellan's metadata and mapping services to be consumed programmatically by other enterprise systems — and every programmatic call is a ledger entry under the calling service identity.
Audit ledger entries written by this feature
Each action in this feature appends one of the following entry types to the ULID‑keyed, SHA‑256 hash‑chained audit ledger. A reviewer can replay the chain to reconstruct exactly what happened, when, and under which role.
AccessGroupChangedSsoAssertionRecordedServiceTokenIssuedRelated glossary terms
Definitions for the technical, regulatory, and standards terms referenced on this page. Each link opens the term in the full glossary.
Open the full glossary