Skip to main content

Management Portal Security

The Q247 Management Portal, that is Q247's web application itself, runs on Microsoft Azure infrastructure.

Access with multi-factor authentication​

Access to the panel for managers is secured with multi-factor authentication, using a TOTP-compliant app on the person's phone, for example Google Authenticator or Microsoft Authenticator. The login screen itself and the MFA flow from the user's perspective are described in Log in; the configuration of the login method for the whole organization (including the SSO alternative) is described in SSO (OIDC).

Service and technical access​

Access to all resources is managed by Azure's built-in authentication and authorization mechanism, based on Microsoft Entra ID, with full audit capability.

Security testing​

The platform's code undergoes recurring security scanning covering dependencies and application configuration. Vulnerabilities found are removed as part of the regular release cycle.

See also​