玉兰安保

Generic authentication doesn't fit an enterprise identity stack. Magnolia DXP's foundational security controls are built to work with the directory, network, and site setup you already have.

• Flexible authentication: Connect to your existing directory setup, including LDAP, certificate-based logins, or CAS single sign-on, instead of managing authentication from scratch.
• Cross-site security: Run multiple sites from one Magnolia DXP instance while keeping content reachable through the right domain, avoiding SEO penalties for duplicate content.
• Configurable access controls: Restrict access down to specific IP ranges or request types when your security policy calls for it.

Magnolia DXP supports enterprise security policies through comprehensive SSO and IdP federation, so access decisions stay tied to the directory you already manage.

• Federated identity: Created on first login, with roles and groups re-mapped from your IdP every login, so removing someone from your directory ends their access at the next request.
• Broad IdP support: Integrates with major identity providers (e.g., Okta, Microsoft Entra ID) via SAML 2.0 and OIDC, removing the need for custom authentication development.
• Granular governance: Define scope-based permissions for editors and administrators, so content stays secure without slowing editorial workflows.

AI agents only earn trust if they operate inside real limits. Magnolia DXP's agents are governed by design, not by policy documents nobody reads. Magnolia DXP doesn't build or train its own AI models. Agents connect to your choice of third-party providers, such as OpenAI, Anthropic, and AWS Bedrock, through Magnolia AI Connector framework, so this governance applies no matter which model is doing the work.

• Human-in-the-loop validation: Agents can stage drafts, but publishing is disabled by default. Automated actions still route through your team's existing approval workflow.
• Three-layer security framework: Each agent skill runs within its own restrictions, bounded by role-based access control, and subject to module-level deactivation.
• Audit logging: Tool executions, queries, and system changes are logged, giving compliance teams the traceability they need.

一旦安全措施依赖于某人记得将其开启，它就不再有效。Magnolia DXP 将企业级防御功能直接内置于平台中，并默认处于启用状态。

• 自动化边缘防御：针对大规模 DDoS 攻击和 AI 机器人提供强力防护，在它们到达您的服务器之前将其拦截。
• 零信任完整性：在部署过程中对自定义代码进行扫描，并且由您自行管理加密密钥。
• 篡改防护：全天候监控您的公共页面，以检测并标记未经授权的更改。