Super-Admin Control Plane

Strict Two-Tier Security Isolation: System Operators vs. Tenant Clients

Tier 1: Internal System Operators (system_users)

Stores staff and super-admins governing the NoctisID infrastructure. Isolated database table with zero tenant commingling. Sessions (ua_sys_session) are strictly confined to the admin portal (/admin/*) with mandatory hardware MFA.

Tier 2: Tenant Clients & Redirection Journeys (tenant_users)

If a system operator tests login on a tenant website (e.g. hireyork.trade), they authenticate via tenant_users and are immediately redirected back to the spoke site with OAuth authorization codes, never retained inside the admin system.

Internal System Staff (4 Active Personnel)

Direct access to core infrastructure, master encryption keys, and tenant governance.

Admin ID & Email	System Role	MFA Enforcement	Governance Scope	Status	Last Active
stephan@wisi.co.za `sys_9f82c4a1`	Super-Admin	Hardware FIDO2	Full Master Platform Governance	Active	Just now
claire.admin@authcentral.io `sys_41c0021b`	Platform Operator	TOTP Enforced	Tenant Provisioning & Scaling	Active	15 mins ago
david.security@authcentral.io `sys_77e9941a`	Security Auditor	TOTP Enforced	Domain Inspections & Incident Response	Active	4 hours ago
support.lead@authcentral.io `sys_12bc880f`	Support Engineer	TOTP Enforced	Tenant Diagnostics (Read-Only)	Active	1 day ago

Client ID & Email	Client Role	Tenant & Workspace Memberships	Linked Providers	Status	Last Active
stephan@wisi.co.za `usr_stephan_client` Client Identity	Tenant Owner	HireTrade UK (Owner · 3 Workspaces) Casino Affiliates Global (Admin)	Google, Apple, GitHub	Active	10 mins ago
admin@hireyork.trade `usr_31a78e22`	Tenant Owner	HireTrade UK (Owner · Northern Ops)	Google, Meta	Active	12 mins ago
ops@buffalobonus.win `usr_66b910fa`	Tenant Owner	Casino Affiliates Global (Owner · 14 Sites) Apex eCommerce (Collaborator)	Apple, Google	Active	1 hour ago
director@acmedigital.com `usr_88d1192e`	Tenant Owner	Apex eCommerce Hub (Owner · 8 Sites)	Google	Active	2 hours ago
manager@hirelondon.trade `usr_08cb771d`	Workspace Admin	HireTrade UK (London Workspace)	Google	Active	3 hours ago
compliance@casinoscanada.win `usr_55c4190f`	Workspace Admin	Casino Affiliates Global (Canada & Ontario)	Google, Apple	Active	5 hours ago
lead.dev@technorth.co.uk `usr_22a8711c`	Workspace Admin	North Star Media (Tech Portals)	GitHub, Google	Active	Yesterday
support@hiretrade.co.uk `usr_19a0081d`	Site Collaborator	HireTrade UK (Northern Ops · Read-Only)	Google	Active	2 days ago
auditor@gamingreg.org `usr_63e4129b`	Site Collaborator	Casino Affiliates Global (Audit Telemetry)	Google	Active	3 days ago

Registered Tenants & Workspaces Hierarchy (42 Tenants)

Organizations group logical workspaces; workspaces contain globally unique domains.

Tenant Organization	Workspaces Included	Primary Contact / Owner	Tier Plan	Total Domains	End-Users
HireTrade UK Network `tnt_hiretrade_uk`	3 Workspaces: • Northern England Operations (4 domains) • London & Southern Operations (2 domains) • Staging & Sandbox (1 domain)	stephan@hiretrade.co.uk	Enterprise	6 Domains	1,420
iGaming Global Group `tnt_igaming_group`	3 Workspaces: • North America Operations (8 domains) • EU Regulated Brands (6 domains) • Compliance & Auditing (2 domains)	ops@buffalobonus.win	Enterprise	14 Domains	8,420
Acme Digital Tenancy `tnt_acme_tenancy`	2 Workspaces: • Production Web Apps (5 domains) • Beta Services & Sandbox (3 domains)	director@acmedigital.com	Business	8 Domains	3,110
Nexus Affiliate Network `tnt_nexus_affiliates`	2 Workspaces: • UK Regional Publishers (12 domains) • International Portals (8 domains)	lead@nexusaffiliates.com	Enterprise	20 Domains	4,890
North Star Media Group `tnt_northstar_media`	3 Workspaces: • News & Editorial Hubs (7 domains) • Affiliate Data Feeds (4 domains) • Brand Portals (3 domains)	media@northstargroup.co.uk	Business	14 Domains	1,100

✓ Global Domain Collision Invariant (100% Unique)

124 Connected domains active across 42 tenants. Each domain is registered strictly ONCE globally to prevent callback hijacking and ensure single-app vendor routing.

0 Domain Collisions

Domain Entity Inspector

Select any registered domain to inspect its complete entity graph and live security telemetry.

Owning Tenant & Workspace

HireTrade UK Network

Northern England Operations

Client ID

cid_live_hireyork771

Access Delegation

2 Full Access, 1 Read-Only

Webhook Health

Healthy (200 OK)

Whitelisted Redirect URIs

              ["https://hireyork.trade/auth/callback", "https://hireyork.trade/auth/oauth/consume"]
            

Live Gateway Handshake & Security Audit Stream

              [2026-10-22 12:21:04] SUCCESS: Ticket tkt_881f redeemed. IP: 82.165.197.1 | Country: GB | Trace-ID: 8d654f12ab9901

              [2026-10-22 12:19:48] SUCCESS: Ticket tkt_330a redeemed. IP: 185.12.14.99 | Country: GB | Trace-ID: 8d654ef99281a0

              [2026-10-22 12:15:30] WEBHOOK: Dispatched user.authenticated to https://hireyork.trade/api/relay (Status: 200)

Global Security & Audit Log Stream

Consolidated audit events across all tenants, workspaces, and administrative sessions.

        [2026-10-22 12:23:45] ADMIN_IMPERSONATION: Admin stephan@wisi.co.za viewed session as admin@hireyork.trade (HireTrade UK / Northern Ops)

        [2026-10-22 12:21:04] TICKET_BURN: 60s ticket tkt_99f2b atomically redeemed on hireyork.trade (Trace-ID: trc_8d65401)

        [2026-10-22 12:19:48] TICKET_BURN: 60s ticket tkt_331ab atomically redeemed on buffalobonus.win (Trace-ID: trc_8d65392)

        [2026-10-22 12:15:30] WEBHOOK_DELIVERY: Dispatched user.authenticated to https://hireyork.trade/api/relay (Status: 200 OK)

        [2026-10-22 12:10:02] TENANT_KEY_ROTATE: Client secret re-generated for cid_live_hirelondon_99 by manager@hirelondon.trade

        [2026-10-22 12:05:40] USER_AUTHENTICATED: Social federation via Apple ID for user emma.watson@icloud.com

        [2026-10-22 11:59:12] CORS_ORIGIN_VERIFIED: https://casinoscanada.win whitelisted for tenant tnt_igaming_group

Upstream OAuth Providers & Master API Credentials

5 Active Upstream Providers

Centralized master application keys held at the broker root. All 100+ child sites delegate authentication through these master edge credentials without individual vendor app setup.

🔑 Zero Spoke-Site Vendor Setup Invariant

Child sites (e.g. hireyork.trade, casinoscanada.win, buffalobonus.win) never register developer accounts with Google, Apple, or Meta. You configure exactly 1 master application per provider here. The broker manages OAuth handshakes at the edge, verifies tokens, and issues 60-second single-use tickets back to spoke sites.

Google Cloud Identity

OAuth 2.0 & OpenID Connect

● Verified · 11ms

CLIENT ID:

71928410294-ab829cd.apps.googleusercontent.com

CLIENT SECRET:

GOCSPX-••••••••••••••••••••••••

MASTER BROKER CALLBACK URI:

https://auth.noctisid.com/oauth/callback/google

Sign in with Apple

Apple ID / RS256 Private Key

● Verified · 13ms

SERVICES ID (CLIENT ID):

com.noctisid.service.id

TEAM ID: TEAM_8841BC90

KEY ID: KEY_7741FA02

MASTER RETURN URL:

https://auth.noctisid.com/oauth/callback/apple

Meta Graph API

Facebook Login API v19.0

● Verified · 15ms

APP ID:

198204910294819

APP SECRET:

••••••••••••••••••••••••••••••••

VALID OAUTH REDIRECT URI:

https://auth.noctisid.com/oauth/callback/facebook

GitHub OAuth Platform

Developer Apps & Org SSO

● Verified · 9ms

CLIENT ID:

Iv1.99a8b172c401e99

CLIENT SECRET:

••••••••••••••••••••••••••••••••

MASTER CALLBACK URL:

https://auth.noctisid.com/oauth/callback/github

Microsoft Entra ID

Azure AD & Office 365 OIDC

● Verified · 18ms

APPLICATION (CLIENT) ID:

e7b99c01-44ab-412e-9901-b84129e001ab

TENANT / DIRECTORY ID:

common (Multi-Tenant Organization SSO)

MASTER REDIRECT URI:

https://auth.noctisid.com/oauth/callback/microsoft

Add Custom Enterprise Provider

Connect Okta, PingIdentity, Auth0, Discord, or any custom OpenID Connect / SAML 2.0 provider.

Live Upstream Handshake Health Telemetry

● Continuous Edge Polling Active (Every 60s)

          [12:51:02] Google OAuth 2.0: HTTP 200 OK | Round-trip: 11ms | Cipher: TLS_AES_256_GCM_SHA384 | Discovery: /.well-known/openid-configuration verified

          [12:51:02] Apple Sign In: HTTP 200 OK | Round-trip: 13ms | RS256 JWKS key rotation verified (3 public keys active)

          [12:51:03] Meta Graph API: HTTP 200 OK | Round-trip: 15ms | App Access Token valid (Expires: 60 days)

          [12:51:04] GitHub OAuth: HTTP 200 OK | Round-trip: 9ms | API rate limit: 4,992 / 5,000 remaining

          [12:51:04] Microsoft Entra: HTTP 200 OK | Round-trip: 18ms | Tenant common metadata validated