Executive summary
One platform for people, workloads and AI agents, on infrastructure and keys you control.
White paper
Identity infrastructure you control.
A 12-page overview of HelixIAM for security architects and platform teams: the reference architecture, how agents, workloads and people share one issuer, and where the keys live.
PDF · 12 pages · 1.2 MB · English · describes HelixIAM as of November 2026 · no sign-up needed
What's inside
Nine sections, one reference architecture.
Read it front to back, or jump to the part your review needs.
The identity challenge
One request can cross a person, an AI agent and several workloads. The questions a security review asks.
The platform
Two propositions, HelixIAM AI Identity and HelixIAM Sovereign, on one identity core.
Reference architecture
HelixIAM in your own Kubernetes cluster, with a walkthrough of each component and deployment notes.
AI-agent identity
Owners, lifecycle and suspension, and delegation with RFC 8693 where authority only narrows.
Sovereignty and key custody
Three custody profiles per realm, HSM and Vault or OpenBao backends, and what happens when a backend is unavailable.
Enterprise IAM, workload identity and European eID
Sign-in, federation and SSO, keyless workload identity, European eID and moving from your current IAM.
Security engineering and trust
Standards, security testing in CI, signed releases with an SBOM, and audit and privacy tooling.
Deployment, support and how to start
How KubeDNA supports a deployment, and the path from technical demo to pilot.
Prefer to see it running?
In a technical demo our engineers show the flows from the paper on a live system and map them to your environment.