# Identity and security

Control who can access your organization and how—manage [users](/identity-and-security/managing-organization-users), enforce [SSO](/identity-and-security/sso) and [MFA](/identity-and-security/mfa), review [audit logs](/identity-and-security/audit-logs), and secure your data with [API keys](/identity-and-security/managing-api-keys) and [customer-managed encryption keys](/identity-and-security/customer-managed-keys).

- [Managing users](/identity-and-security/managing-organization-users): Manage users and role-based access at the organization and project level.
- [Single Sign-On (SSO)](/identity-and-security/sso): Enforce OIDC-based sign-in to the Crusoe Cloud Console from your identity provider.
- [Audit logs](/identity-and-security/audit-logs): Review a 90-day history of resource, administrative, and billing activity in your organization.
- [Multi-factor authentication](/identity-and-security/mfa): Require an extra layer of security when signing in to the Crusoe Cloud Console.
- [API keys](/identity-and-security/managing-api-keys): Create and manage API keys for programmatic access to Crusoe Cloud resources.
- [Customer-managed keys](/identity-and-security/customer-managed-keys): Encrypt and decrypt your data with a KMS key you own in your AWS account.