Integrations Overview
How NetSeed connects to identity providers, device trust signals, and security event pipelines. Covers the integration model and what each connection point does.
Contact engineering
Documentation
Docs for every layer of NetSeed.
Three tracks: product reference for understanding how each component works, guides for common deployment and integration tasks, and API reference for building on top of the control plane.
Product Docs
Reference documentation for every product layer.
These docs explain how each part of NetSeed works — integration points, configuration model, and the behavior of each component.
Identity & Provisioning
OIDC configuration, group-based policy mapping, user lifecycle, and directory sync. How identity flows from your IdP into access decisions.
Contact engineeringDevice Trust
How device trust signals are evaluated as part of access decisions. Managed device conditions, compliant device requirements, and device-based policy rules.
Contact engineeringEvent Streaming
Per-flow audit record format, streaming destinations, HTTP endpoint configuration, object storage export, and SIEM integration patterns.
Contact engineeringDeployment Models
Cloud-managed, self-hosted, and hybrid deployment options. Component placement, control plane configuration, and operational requirements for each model.
Contact engineering
Guides
Step-by-step walkthroughs for common tasks.
Guides cover the most frequent deployment and integration workflows — each one takes you from start to a working configuration.
Connect an identity provider
Configure OIDC federation between your IdP and NetSeed. Map directory groups to access policies. Verify that authentication and group sync work end to end.
Contact engineeringPublish a private service
Deploy NSN alongside a private service. Configure the service record in NSD. Verify that authenticated clients can reach the service by name and that unauthorized flows are dropped.
Contact engineeringSet up developer access
Configure scoped access for an engineering group. Install NSC on developer machines. Walk through the full authentication and service resolution flow.
Contact engineeringSet up AI workload access
Issue a workload identity for an agent or CI job. Scope access to the required service endpoints. Verify access boundaries and audit record output.
Contact engineeringExport audit events
Configure per-flow audit records to stream to an HTTP collector, SIEM, or object storage bucket. Verify record format and delivery against a sample flow.
Contact engineering
API Reference
The full control plane API surface.
Every lifecycle operation — user enrollment, service publishing, policy management, key rotation, temporary access — is available through the API. All endpoints return structured JSON.
Authentication
API token issuance, scope, and rotation. How to authenticate requests to the control plane API from scripts, CI, or internal tooling.
Contact engineeringIdentities
List, inspect, and manage user and workload identities. Enrollment, deactivation, and session state endpoints.
Contact engineeringGroups
Create and manage groups. Assign identities to groups. Groups are the primary unit for policy attachment in NetSeed.
Contact engineeringPolicies
Create, update, and distribute access policies. Policy objects bind identities or groups to services with optional device trust conditions.
Contact engineeringServices
Publish, update, and retire service records. Service objects define what is reachable, at which site node, and under which access policy.
Contact engineeringEvents
Query historical audit records. Filter by identity, service, policy, time range, or outcome. Export endpoints for bulk retrieval.
Contact engineeringTemporary access workflows
Issue, inspect, and revoke time-limited access grants. Grant objects support approval state, expiry timestamps, and scoped service binding.
Contact engineering
API · example request
# list active policies
curl -H "Authorization: Bearer $TOKEN" \
https://api.netseed.info/v1/policies
HTTP 200 OK
Content-Type: application/json
[ { "id": "p-9d1f", "name": "eng-prod-db-read", ... }, ... ]