> ## Documentation Index
> Fetch the complete documentation index at: https://docs.idemeum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# JIT for Entra overview

> Eliminate shared credentials and access Entra ID tenants with on-demand admin accounts.

## How JIT for Entra ID works

<Card title="Demo - JIT access to Entra ID" icon="youtube" horizontal href="https://www.youtube.com/watch?v=rDvegB8IBoE">
  See how you can eliminate shared credentials when accessing customer Entra ID tenants
</Card>

When you have multiple Entra ID tenants your technicians need to access, you can leverage idemeum to automatically manage individual on-demand admin accounts. Technicians request admin accounts, login to do their business, and then after some time the accounts will be disabled and passwords rotated. You can request Entra JIT accounts from idemeum portal, or you can integrate our platform with your ticketing system, so that you request Entra JIT accounts right from customer support tickets.

## JIT for Entra ID primary features

<AccordionGroup>
  <Accordion title="On-demand cloud accounts" defaultOpen>
    Technicians access Entra ID tenants with individual on-demand accounts. Idemeum will provision admin accounts, rotate passwords after each use, and disable these JIT accounts when not in use.
  </Accordion>

  <Accordion title="PSA integrations" defaultOpen>
    Integrate idemeum into your PSA system. Technicians can access Entra JIT accounts right from your ticketing system. 
  </Accordion>

  <Accordion title="Browser extension" defaultOpen>
    Idemeum offers Chrome browser extension to perform an auto-fill of on-demand credentials when technicians need to login to Entra tenants.
  </Accordion>

  <Accordion title="Granular permissions" defaultOpen>
    Define what roles technicians need to assume in Entra when idemeum creates JIT accounts, and define the time interval when accounts expire and need to be requested again.
  </Accordion>
</AccordionGroup>