Skip to content

Exclusive 50% off for 36 months for the first 100 Professional accounts, until 31 December 2026. See the programme →

Security & compliance · Authentication

Sign in the way the state requires, and the way your IT department wants

Metaventus offers two-factor authentication to everyone, requires it from owners and administrators, and plugs into the identity you already have: your corporate directory and, for the public sector, ProConnect for staff, FranceConnect and FranceConnect+ for citizens — a requirement we met on a metropolitan authority contract, and built in.

Get started for free Request a demo

No credit card required

In practice

One account, several locks

Two-factor authentication, genuinely strong

Three second factors: a code by SMS, an authenticator app (TOTP), or a passkey, which uses the device's fingerprint or face recognition and resists phishing. Every account is verified when it is created. Owners and administrators have no choice: on their first login, enabling 2FA is required.

  • SMS, authenticator app or passkey
  • 2FA mandatory for owners and administrators, enabled from the first login
  • Account verification at sign-up
  • Session reuse detection: all sessions revoked, an incident opened

ProConnect, FranceConnect and FranceConnect+

On a public sector contract, the subject comes up quickly: staff must sign in with ProConnect, citizens with FranceConnect. We built it for a metropolitan authority, and it is available to every local authority and government body: ProConnect for your staff, FranceConnect for the users of your portal, FranceConnect+ when the substantial level of assurance (eIDAS) is required. The identity comes from the state, the permissions stay with you.

  • ProConnect for staff and elected officials
  • FranceConnect for portal users
  • FranceConnect+ for the substantial level of assurance (eIDAS)
  • Permissions managed in Metaventus, identity verified by the state

Your organisation's SSO

Microsoft Entra ID, Google Workspace, Okta, OneLogin, Auth0, or any SAML 2.0 or OpenID Connect provider through manual configuration: your users sign in with the account they already have. Automatic provisioning creates accounts on first login, with the default role you set, and only from the domain you allow.

  • Entra ID, Google Workspace, Okta, OneLogin, Auth0 preconfigured
  • SAML 2.0 and OpenID Connect through manual configuration
  • Automatic provisioning with a default role and an allowed domain
  • Login history available to consult, kept twelve months by default
On request

What you can demand from us

For your specification or your CISO, on request.

  • SSO datasheet (SAML / OIDC) and setup guide
  • Integration terms for ProConnect, FranceConnect and FranceConnect+
  • Password, 2FA and session policy
  • Login history: format and retention period
dpo@metaventus.com

Security & compliance

The other commitments

Hosting in the European Union and HDS option

Your data in the EU, backed up, locatable — and an HDS option for healthcare.

Data encryption

TLS in transit, encryption at rest, hashed passwords, secrets out of the code.

Granular permissions and audit log

Roles built from individual permissions, two logs — login history and sensitive actions — with minimum retention periods.

AI-driven monitoring and incident response

A dedicated service reads security events continuously, opens incidents graded by severity, summarises and recommends — then alerts.

GDPR by design

Consent by channel, tooling for access and erasure rights, anonymisation, cascading deletion.

Measured availability and SLA

99.9% SLA on the Enterprise plan, a public status page, documented incidents.

FAQ

Frequently asked questions

Is two-factor authentication mandatory for everyone?

It is mandatory for account owners and administrators, who must enable it on their first login, and available to all other users from their profile.

What is a passkey?

A way to sign in without a password, tied to your device and protected by its fingerprint, face recognition or code. It cannot be phished: a fraudulent site will never receive the key.

ProConnect, FranceConnect, FranceConnect+: which one for whom?

ProConnect identifies public sector staff and elected officials. FranceConnect identifies citizens (individuals) on your portal. FranceConnect+ does the same with a substantial level of assurance under eIDAS, for procedures that require it.

What happens if a session is stolen?

Reuse of a session token is detected: all of that user's sessions are revoked immediately, a critical incident is opened in our security service and an alert is sent.

Another question? Write to us — a human will answer.

Ready to bring all your tools together?

Create your free account in two minutes: CRM, telephony, marketing, appointments and customer service — all in one place, with AI built in.

Get started for free Request a demo

No credit card required