> ## Documentation Index
> Fetch the complete documentation index at: https://docs.idemeum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# JIT for Entra overview

> Eliminate shared credentials when accessing customer Entra ID tenants.

## How JIT for Entra ID works

<Card title="Just-in-time login for Entra ID" icon="video" href="https://www.youtube.com/watch?v=rDvegB8IBoE">
  See how you can eliminate shared credentials when accessing customer Entra ID tenants
</Card>

When you have multiple Entra ID tenants your technicians need to access, you can leverage idemeum to automatically manage individual on-demand admin accounts. Technicians request admin accounts, login to do their business, and then after some time the accounts will be disabled and passwords rotated. You can request Entra JIT accounts from idemeum portal, or you can integrate our platform with your ticketing system, so that you request Entra JIT accounts right from customer support tickets.

## JIT for Entra ID primary features

<AccordionGroup>
  <Accordion title="On-demand cloud accounts" icon="user-check">
    Technicians access Entra ID tenants with individual on-demand accounts. Idemeum will provision admin accounts, rotate passwords after each use, and disable these JIT accounts when not in use.
  </Accordion>

  <Accordion title="PSA integrations" icon="plug">
    Integrate idemeum into your PSA system. Technicians can access Entra JIT accounts right from your ticketing system. 
  </Accordion>

  <Accordion title="Browser extension" icon="browser">
    Idemeum offers Chrome browser extension to perform an auto-fill of on-demand credentials when technicians need to login to Entra tenants.
  </Accordion>

  <Accordion title="Granular permissions" icon="flag-swallowtail">
    Define what roles technicians need to assume in Entra when idemeum creates JIT accounts, and define the time interval when accounts expire and need to be requested again.
  </Accordion>
</AccordionGroup>