Working with Obexal.
Obexal is a young sovereign European identity provider, built on open standards. We are looking for our first integration and reselling partners: here is what the platform already makes possible, and how to start the conversation.
What the platform makes possible
Everything below ships today and can be verified in the product. Each card links to the details.
Strict multi-tenant
Each customer lives in an isolated tenant: its own users, policies, connections and audit log. Operate several customers side by side from one operator console.
White label per tenant
Login screens carry each tenant's branding, with a self-hosted logo, so a reseller can serve customers under its own brand.
Verified custom domains
Each tenant can run on its own domain, verified by DNS TXT, with automatic TLS.
Admin API, OpenAPI 3.1
A public OpenAPI 3.1 contract at /v1/openapi.json, and scoped admin API tokens for automation.
Policy-as-code
Export, plan and apply access policies as versioned files, with impact simulation before rollout and restore.
Standards, no lock-in
OIDC, OAuth 2.1, SAML 2.0 and SCIM 2.0: integrations stay portable and your customers keep the option to leave.
The AI agent angle
Every AI agent in Obexal gets a first-class identity: a human owner, an expiry date, fail-closed scope and TTL ceilings, fully audited delegation and an immediate kill switch. It is an angle few identity providers offer today.
If your customers are deploying AI agents, this is a concrete conversation to bring them. Details on AI agent identity and agent governance.
Let's talk
There is no partner program yet, and we would rather say so than dress one up. Working with Obexal today means a direct conversation with the founder, who designs, develops and hosts the product.
A useful first exchange covers three things:
- Your context: who you are and what you deliver today.
- Your target customers: sectors, sizes and their sovereignty requirements.
- Your model: integration, reselling, or both.
Commercial terms are built with the first partners: tell us what would work for your model and we will build it together. Reach us through the contact page.
Questions we hear
Is there a partner program?
Not yet. Obexal is early stage: we work directly with the first integrators and resellers, and the terms are built together. When a formal program exists, it will be published on this page.
Can I run Obexal under my own brand?
Yes. Obexal is multi-tenant: login screens and branding are configured per tenant, with a self-hosted logo and a custom domain verified by DNS. A reseller can serve its customers under its own brand. See single sign-on.
What are the commercial terms?
There is no public grid yet: conditions are built with the first partners. Tell us about your model through the contact page and we will work it out together.
What does AI agent identity add for my customers?
Each AI agent gets a first-class identity: a human owner, an expiry, fail-closed scope and TTL ceilings, an immediate kill switch and a forensic delegation log. It is an angle few identity providers offer today. Details on AI agent identity.
Where is Obexal hosted?
In France, in a datacenter in the Paris region, with data residency in the EU and no dependency outside the EU in the request path. Certifications: not certified to date, ISO 27001:2022 mapping documented, SecNumCloud roadmap under way. Details on the security page.
Let's talk.
Tell us about your context, your target customers and your model. We usually reply within one business day.