Genome Orchestrator

Codex IAM Identity and Access Management

The central security layer of Genome. Protects your corporate assets with single-point session control, role-based authorization, active session monitoring and retroactive audit trails.

All products
  • One sign-on (SSO), every module
  • Role-based access (RBAC)
  • Immutable audit trail

Overview

Don't scatter security across modules: identity, permission and audit under one roof, the same rule on every access.

Data security and access control sit at the center of modern enterprise architectures. Codex, the core module of Genome, unifies authentication, authorization and user activity logging, and sets each employee's limits precisely to prevent data leaks.

Working in line with ISO 27001, KVKK and GDPR requirements, Codex records in real time who made every insert, update and delete in the database, when, and from which IP.

  • Central SSO

    All Genome modules draw on one identity pool; one password reaches every area you are authorized for.

  • Second factor by device

    The first device is verified by SMS, approved devices by Genome Mobile; if the token changes it falls back to SMS.

  • Function-level permissions

    Not just page-based; permissions per operation such as sending e-invoices, bank transfers and stock reservation.

  • Immutable audit trail

    Every data change is stored as JSON with its previous and next values.

Access simulator

Try how Codex decides on an access request yourself.

Pick the role, the action and the device state. Codex verifies the identity, picks the second factor from the device, applies the role matrix and writes every attempt to the audit ledger.

User role
Requested action
Device and location
ACCESS DECISIONAllowed

Finance Manager · Read trial balance

  1. 1Identity (SSO)Verified in the single identity pool
  2. 2Device and second factorOTP sent to Genome Mobile on the approved device
  3. 3Permission (RBAC)The role may perform this action
  4. 4Audit recordTime, user, IP and result are written to the ledger

Audit ledger

No records yet. Add a row to the ledger with "Try access".

Inside the console

Five screens that manage identity and access

Each tab shows one Codex screen with its sample data.

User and account management

Manage user sessions, token lifetimes, profile updates and two-step verification from one place.

  • Central SSO architectureAll Genome modules draw on one identity pool; users reach what they are authorized for with one password.
  • Secure 2FA with automatic SMS fallbackFirst device enrollment uses SMS OTP; on approved devices the OTP goes straight to Genome Mobile, and a changed token falls back to SMS.
  • JWT and refresh token cycleShort-lived JWTs and secure refresh keys maximize session security in API traffic.
User and account managementSample data
NameRole groupVerificationLast activityStatus
System AdminSuper AdminSMS1 min agoOnline
Selin YılmazFinance ManagerApp3 min agoOnline
Burak KayaSales RepresentativeApp2 hours agoOffline
Elif DemirWarehouse ClerkSMS12 sec agoInactive
Hakan TekinProcurement OfficerSMS3 weeks agoBlocked

Why Codex

Six advantages that bring security into one standard

Unlike piecemeal or module-embedded authorization, Codex unifies all system security in a single IAM standard.

  • Central identity management

    Single sign-on across the whole Genome ecosystem; a seamless experience when moving between modules.

  • ISO 27001 and KVKK compliance

    Meets personal data security and access control requirements and eases legal obligations during audits.

  • Live session and device control

    See where and with which device the system is accessed; close sessions remotely when something looks suspicious.

  • Detailed change tracking

    The update history of every record is kept with previous and next values for maximum accountability.

  • API and integration security

    Token-based data flows between microservices and third-party integrations run over encrypted, verified channels.

  • Genome Mobile approval and SMS fallback

    First verification starts by SMS without any external tool; on an approved device the OTP arrives in Genome Mobile.

FAQ

What to know about Codex

Answers to common questions. For more, get in touch with us.

  • Codex is the central IAM (Identity and Access Management) layer that runs authentication, authorization and security audit processes for the Genome ecosystem and all your digital platforms.

  • In Codex you define role groups that fit how your departments work (e.g. Finance Manager, Warehouse Staff) and assign module permissions to them. Users added to the system inherit the permission matrices of their groups automatically.

  • Codex meets ISO 27001 Information Security Management requirements and the access traceability rules of KVKK and GDPR. All sessions, session terminations and data changes are kept in a retroactive, undeletable log ledger.

  • Third-party apps (Google Authenticator etc.) are not used; SMS and Genome Mobile integration are the basis. The first device is verified by SMS OTP, and once approved, OTP codes go straight to Genome Mobile. If the device's security token changes or its authorization is revoked, it is dropped from the approved list and the system falls back to SMS.

  • It records insert, update and delete actions on critical database tables. For an update it stores the user's identity, time, IP address and the old and new values of the changed fields as JSON.

  • Yes. Besides SMS OTP and Genome Mobile 2FA, the FIDO2 and WebAuthn standards for biometric sign-in (fingerprint, face recognition, etc.) are supported.

  • Yes. Codex is a security orchestrator at the core of modules such as Thalamus ERP, Human Resources and the Customer Portal, but it can also be integrated through APIs with your existing on-premise or cloud software as a central identity pool.

Glossary

Terms used on this page

IAM
Identity and Access Management. The security discipline that lets the right people reach the right resources, for the right reasons, at the right time.
SSO
Single Sign-On. Lets a user sign in to several independent systems with one username and password.
RBAC
Role-Based Access Control. Restricts access by the user's role in the organization instead of individual permissions.
JWT
JSON Web Token. An open standard for securely transmitting information between parties as a JSON object.
MFA
Multi-Factor Authentication. Verifying identity with two or more proving factors.
FIDO2
An open industry protocol that brings passwordless, secure, biometric authentication to browsers and applications.

LET'S START

Manage identity and access from one place with Codex.

Let our team show you Codex live on your role structure and device policies.

Contact us

WORKS TOGETHER WITH

Chat with us on WhatsApp