List of the Top Identity Management Software for Nonprofit in 2025 - Page 9

Sangfor Access is an innovative cloud-native SASE solution designed to securely connect branch offices and remote users to vital business applications. Organizations can either keep their existing routers or choose Sangfor SIER to leverage SD-WAN connectivity, which directs all traffic efficiently to Sangfor Access. For remote users, a lightweight client can be easily installed on their laptops, allowing for seamless routing of relevant traffic to the platform. This solution is tailored to tackle the essential facets of networking, which include identity verification, access control, and security measures. It begins by authenticating user identities and ensuring that only authorized individuals can access business applications, in line with predefined policies and profiles. Sangfor Access provides round-the-clock protection for both branch locations and remote personnel against various threats, such as phishing attacks, malware, and ransomware. Additionally, it features auditing tools that monitor potentially inappropriate use of corporate applications, thereby maintaining a strong security framework for organizations. This comprehensive approach not only fortifies security but also simplifies access management across a wide array of user environments, ultimately promoting operational efficiency. By integrating these functionalities, businesses can enhance their overall productivity while safeguarding sensitive information.

SecureIdentity IAM proficiently governs access control decisions pertaining to applications and data repositories. By utilizing information from the Universal Directory, it can dynamically ascertain the applications accessible to a user and the specific file servers or cloud storage they're authorized to engage with. This access control mechanism is implemented via a client installed on the endpoints, which intercepts incoming access requests for applications or data and assesses them against predefined policies. When a user requests an action that is allowed, they enjoy smooth access without interruptions. In contrast, if the request is denied, the system prevents the execution of the relevant executable or DLL files, irrespective of how they were triggered. Furthermore, every action taken is carefully documented and sent to the platform's event database, thereby constructing a thorough forensic record of user activities that is crucial for security audits and compliance initiatives. This multifaceted strategy not only prioritizes user convenience but also ensures that rigorous security protocols are upheld throughout the entire access process, fostering a secure and efficient environment for data management.

Boost your team's efficiency by offering direct and secure access to vital business resources through CyberArk Workforce Identity, formerly known as Idaptive. It is essential for users to quickly reach a variety of business tools, while you must confirm that it is the legitimate user accessing the system rather than a potential intruder. By implementing CyberArk Workforce Identity, you can enhance your team's abilities while simultaneously protecting against various threats. Remove barriers that hinder your employees, allowing them to drive your organization towards greater success. Employ robust, AI-driven, risk-aware, and password-free authentication methods to verify identities. Streamline the process of managing application access requests, along with the generation of app accounts and access revocation. Prioritize keeping your staff engaged and productive instead of overwhelming them with repetitive login procedures. Leverage AI-generated insights to make well-informed access decisions. Additionally, ensure that access is available from any device and location, precisely when it is needed, to maintain smooth operations. This strategy not only bolsters security but also enhances the overall efficiency of your organization's workflow, paving the way for future innovations and success.

Improve customer satisfaction by ensuring easy and secure access to your websites and applications, which strengthens loyalty to your brand. The need for outstanding digital experiences is at an all-time high, yet the threats in the digital world are continually evolving. By implementing CyberArk Customer Identity, you can provide secure access to your platforms with confidence. Enjoy seamless integration, intuitive access controls, and a hassle-free sign-on experience. This solution integrates privacy, consent, and identity verification into a single, unified system. With pre-built components and open APIs, it significantly reduces development time and resources. It guarantees secure access to business applications for both human users and machine identities, especially in the DevOps environment. By simplifying processes, you ease the workload on your IT staff while enhancing the protection of your valuable assets. Ultimately, this approach allows you to provide secure single sign-on features for your applications and services, creating a more streamlined user journey. Such a holistic strategy not only protects sensitive information but also builds a reliable relationship with your customers, encouraging their continued engagement with your brand.

Real Identity™ equips brands with the ability to make quick, informed decisions, enabling the delivery of relevant messages at any given moment. This cutting-edge platform empowers prominent global brands to recognize and engage individuals ethically, regardless of time or place, thereby creating significant experiences. By ensuring that engagement is broad, scalable, and accurate during every single interaction, companies can greatly improve their outreach efforts. Moreover, Real Identity assists in the management and preservation of identity across the organization, leveraging decades of experience in data and identity alongside the latest advancements in artificial intelligence and machine learning. As the adtech landscape continues to shift, the demand for rapid access to identity and data becomes crucial for driving personalization and well-informed choices. In a world without cookies, the dependence on first-party data signals will be vital for these initiatives, fostering ongoing conversations among individuals, brands, and publishers. By crafting meaningful experiences across multiple channels, companies can not only leave a lasting impression on their customers and prospects, but also ensure compliance with evolving regulations, thereby sustaining a competitive advantage. This strategy guarantees that brands remain responsive to changing consumer preferences and market trends, ultimately fostering loyalty and satisfaction.

Robust digital security is achievable through the most reliable on-premises identity and access management (IAM) solutions available today. The Identity Enterprise platform offers an integrated IAM system that caters to a diverse array of consumer, employee, and citizen scenarios. It excels in managing high-assurance applications that necessitate a zero-trust model for potentially millions of users. The platform is versatile, allowing for deployment both on-premises and through virtual appliances. The principle of "never trust, always verify" ensures that both your organization and its user communities remain secure, regardless of their location. High-assurance applications include features like credential-based access, issuance of smart cards, and top-tier multi-factor authentication (MFA), safeguarding your workforce, consumers, and citizens alike. Additionally, user experience can be enhanced through adaptive risk-based authentication and passwordless login options. Digital certificates (PKI) can be employed to elevate security, offering robust protection whether utilizing a physical smart card or a virtual counterpart, thereby reinforcing the integrity of your identity management strategy. This comprehensive approach ensures that security remains a priority while minimizing potential obstacles for users.

For businesses that operate multiple websites and applications, it is crucial to provide a seamless authentication experience across all platforms, enabling users to log in once and access all services without needing to re-enter their login information. OpenAM serves as a robust solution that effectively addresses these challenges by providing over 20 different authentication modules, which allows for a tailored approach to the authentication process that can cater to specific organizational needs. Furthermore, it offers the ability to customize the sequence in which these modules are executed, thus facilitating options for multi-factor or adaptive authentication to bolster security measures. In addition to managing authentication, OpenAM also takes care of authorization, allowing administrators to establish access restrictions based on a variety of policies. The platform's extensive extensibility means that any component can be modified, from authentication modules to user data sources, ensuring that it can align with your specific operational requirements. Furthermore, OpenAM includes features for UI customization, enabling the creation of personalized end-user interfaces that resonate with your brand identity, which in turn enhances the overall user experience. Overall, OpenAM not only streamlines the authentication process but also equips organizations with the tools necessary to uphold strong security protocols and deliver a cohesive user experience across all applications and websites, which is increasingly important in today’s digital landscape. This flexibility and adaptability make OpenAM a strategic choice for businesses looking to improve their security and user interaction.

Innovatrics ABIS is an all-encompassing biometric identity management solution that integrates advanced fingerprint, iris, and facial recognition technologies. It offers fast and accurate performance while utilizing minimal hardware resources, making it efficient and accessible. Thanks to its modular architecture, our ABIS can be customized to suit the specific needs of users, allowing for tailored solutions. The availability of open APIs promotes smooth integration with diverse systems, effectively avoiding any risks of vendor lock-in. We have successfully deployed our ABIS across many extensive biometric projects, including some of the most complex systems in the world. By harnessing our state-of-the-art recognition technologies, organizations can implement a solution that is perfectly aligned with their operational workflows. Our high-performance algorithms have consistently performed at the top in independent NIST evaluations, highlighting their dependability. With the modular nature of our ABIS, users can design an identity management system that directly addresses their requirements. Additionally, the option to incorporate new modules and upgrades as needed ensures that your system remains up-to-date and efficient. Our flexible licensing arrangements cater to the specific demands of each unique project, further enhancing scalability and adaptability. Consequently, organizations can confidently invest in a biometric solution that evolves along with their needs.

The design and approval processes for new products in financial services firms can frequently encounter obstacles due to convoluted and inefficient internal systems. To combat these issues, B-Trust provides a flexible web-based workflow engine that improves and harmonizes communication and approval procedures across different departments. Our marketplace offers tools that help business users automate the identification of potential risks, including the verification of suitable commission rates. Furthermore, users can take advantage of an extensive identity suite equipped with sophisticated onboarding technology, which streamlines the management of identity lifecycles encompassing onboarding, ongoing verification, and identification tasks. Through the utilization of crucial risk and performance indicators, real-time compliance monitoring becomes possible. Additionally, our API-first design allows for smooth integration with current systems of record and external supply chains, creating a cohesive operational structure that can evolve alongside changing business demands. This comprehensive strategy not only boosts efficiency but also significantly elevates overall productivity within the organization, ultimately leading to a more agile and responsive business environment. By fostering such adaptability, B-Trust positions financial firms to thrive in an increasingly competitive landscape.

PlainID is celebrated as The Authorization Company, presenting a simplified and accessible platform that enables both Business and Admin teams to effectively oversee and manage their authorization processes tailored to specific organizational requirements. Users can easily generate and implement a diverse range of rules without needing to code, ensuring a high level of detail and accuracy. The platform improves the authorization workflow by converting various Roles, Attributes, and Environmental Factors into integrated SmartAuthorization policies through its sophisticated Graph Database Decision Engine. Furthermore, PlainID guarantees thorough transparency by offering in-depth analytics and a complete audit trail, facilitating compliance and regulatory navigation through a user-friendly graph-based interface. Access decisions are made in real time, considering user attributes, environmental factors like time and location, as well as event-driven authorizations, seamlessly integrating ABAC and RBAC into a unified policy framework. This cutting-edge methodology not only streamlines the authorization process but also significantly bolsters organizational control and responsiveness in an ever-evolving digital environment, ultimately fostering a more secure and efficient operational landscape.

RapidScale’s Identity as a Service (IDaaS) presents an excellent option for businesses looking to streamline employee network access while upholding strong security protocols. Our platform, built on the capabilities of Azure Active Directory, comes equipped with robust security features right from the start. Protect your vital data and applications, regardless of whether they are in the cloud, hosted, or installed on-site. We offer an array of functionalities, including single sign-on (SSO), multi-factor authentication (MFA), and password synchronization, among other essential tools. With our diverse range of identity service choices, enhancing login security is both easy and effective. You can utilize advanced password synchronization features like user password reset and writeback, as well as numerous additional services that provide precise access management. Our extensive service portal simplifies the administration of your IDaaS offerings alongside the other solutions provided by RapidScale. Alternatively, if you prefer a hands-off approach, we can manage the implementation of your IDaaS solution, guaranteeing a smooth experience for your organization. This adaptability allows you to concentrate on your primary business goals while we expertly handle your identity management requirements, fostering an environment of security and efficiency. Ultimately, with our IDaaS solution, you can ensure that your organization is equipped to tackle the evolving landscape of digital identity challenges.

An innovative identity management solution designed for agile enterprises. The current identity management landscape encounters considerable challenges due to the constantly changing nature of business operations across diverse industries. The IT ecosystem is in a state of ongoing transformation and growth, especially regarding software and systems. The influence of stricter regulations and intense audits plays a crucial role in shaping compliance matters, making it vital for organizations to evolve. Furthermore, the variety and roles of users are perpetually shifting. The modern corporate setting is characterized by frequent reorganizations, mergers, and global strategies, compelling companies to uphold flexible frameworks that can handle such swift transitions. In addition, market demands necessitate solutions that promote digital transformation and progress related to Industry 4.0. Beta Systems' identity and access management solutions offer unmatched flexibility for these dynamic businesses, ensuring thorough compliance by integrating governance and provisioning within a unified IAM framework. This holistic method not only enhances operational efficiency but also equips organizations to confidently navigate the complexities of contemporary identity management challenges.

Organizations must comprehend and regulate access across their entire IT landscape, including both cloud and on-premises applications, as well as infrastructure and DevOps pipelines. This comprehension is vital for external obligations such as regulatory compliance and for internal factors like security, risk management, employee satisfaction, and productivity. Traditional identity management solutions have fallen short of the expectations of contemporary enterprises, with over half of Identity Governance initiatives facing challenges and more than 75% of organizations seeking to upgrade their current systems (Source: Gartner). These legacy systems struggle to adapt to the rapid changes brought about by digital transformation and the emergence of business platforms. Clear Skye, recognized as the sole identity governance and security solution designed natively on the ServiceNow platform, enhances enterprise identity and risk management through a platform-centric approach. It offers tools for workflow management, access requests, access reviews, and identity lifecycle management across diverse industry sectors. By utilizing an established business platform, Clear Skye allows clients to minimize obstacles and IT complexities, thereby enhancing workflows and the overall user experience while also keeping pace with evolving business needs. Furthermore, this innovative solution is tailored to support organizations in navigating the complexities of modern identity governance more effectively.

Accops HyID offers a cutting-edge solution for managing identity and access, aiming to safeguard crucial business applications and sensitive information from unauthorized access by both internal personnel and external threats through efficient user identity governance and access management. This innovative platform provides businesses with extensive control over their endpoints, facilitating contextual access, device entry management, and a flexible policy framework tailored to specific needs. Furthermore, its integrated multi-factor authentication (MFA) functions smoothly across modern and legacy applications alike, covering both cloud-hosted and on-premises systems. This functionality ensures strong user authentication through the use of one-time passwords transmitted via SMS, email, or app notifications, in addition to biometrics and device hardware identifiers combined with public key infrastructure (PKI). The inclusion of single sign-on (SSO) features not only enhances security but also improves user convenience significantly. Organizations are empowered to continuously monitor the security status of their endpoints, including personal devices, allowing them to make immediate access decisions based on real-time risk assessments, thereby reinforcing a more secure operational landscape. As a result, Accops HyID not only strengthens security measures but also optimizes user experiences, making it a valuable asset for any organization seeking improved identity and access management. In this way, businesses can focus on their core activities while trusting that their data security is robust and effective.

Uncovering affordable, easily implementable solutions that can effortlessly merge with existing systems to boost operational efficiency is a key goal. eConnect's Identity Management system, eClear 360, leverages an array of data integrations alongside our state-of-the-art facial recognition technology. This powerful combination opens doors to valuable insights, new business avenues, and protection of revenue, all available through a unified platform. Among its notable capabilities are recognizing anonymous high-value visitors, evaluating their gaming potential and frequency of visits, identifying excluded individuals, detecting advantage players, and flagging patrons with previous criminal records, making it an indispensable tool for meeting customer verification compliance. The Identity Management system employs patented technology for accurate facial identification, complemented by data analytics that aids operators in recognizing staff for time-clock purposes, identifying undesirable individuals or valued guests, and optimizing overall operational efficiency. Furthermore, this groundbreaking approach enables businesses to make strategic, informed decisions that propel growth while upholding safety and security standards, ultimately leading to a more resilient operation. As a result, organizations can not only enhance their service offerings but also build lasting trust with their clientele.

Developing a program that is perfectly suited to your facility and its workforce is essential. Our broad range of products positions us as your ultimate partner for everything, including cutting-edge access control systems, visitor management technologies, and personalized ID cards alongside their necessary accessories. It’s crucial to implement a modern panic button system to provide your faculty and staff with a reliable way to quickly request help during emergencies, thereby replacing outdated systems that may not be as effective. Streamlining the processing of guests is vital to uphold the safety of your premises. The solutions experts at IDenticard will work closely with you to assess your Visitor Management needs and assist in implementing the ideal solution tailored to your campus setting. By focusing on these improvements, we create a smoother and more secure experience for both your employees and visitors, fostering an environment of safety and efficiency. This collaborative approach ensures that all aspects of your security and visitor management are addressed comprehensively.

In the modern marketing landscape, professionals utilize a diverse array of channels to engage potential customers, carefully targeting them based on their preferred devices. The growing intricacy of marketing techniques, paired with the variety of gadgets people utilize to consume digital content each day, makes it increasingly difficult to accurately identify the individual behind a device and their buying habits. When users are not logged in, current tracking technologies rely on IP addresses and device IDs to connect users with the email and landing page components associated with designated marketing campaigns. Although these identifiers can provide broad information like geographical location and previous browsing behavior, they are inadequate in disclosing the true identity of the user or their purchasing tendencies. FuseCommander effectively tackles this issue by unifying the entire buyer's journey, which includes their preferred devices and channels along with the messaging that inspired their choices. By adopting this thorough approach, marketers gain insights not only into the actions taken but also the underlying motivations behind those actions, thereby enhancing the effectiveness of their strategies. Ultimately, this deeper understanding empowers marketers to tailor their efforts more precisely, leading to improved engagement and conversion rates.

Improving your varied IT infrastructures—regardless of whether they are on-premise, cloud-based, or hybrid—necessitates the deployment of multifactor security solutions specifically designed to accommodate the unique requirements of each system, service, workflow, and user preferences. Centralized management guarantees that your organization adheres to both operational needs and compliance regulations through well-articulated policies and settings that can be easily tailored with minimal effort. The incorporation of a sophisticated password management system that aligns with external LDAP or Active Directory frameworks enhances user administration, making it both streamlined and effective. Strengthening trust is essential, achieved by facilitating versatile and secure authentication methods across all user devices. In a business environment where multiple users might share a single device or where an individual may need access across several devices, implementing the right platform makes this process seamless. A critical component of this strategy is the understanding that all interactions center around data, emphasizing the importance of secure management for data both at rest and in transit across mobile devices, web applications, IoT, servers, and databases. Organizations can also adopt customizable security parameters that utilize various key lengths and encryption techniques without incurring the expenses associated with traditional VPN solutions. Moreover, the availability of SDKs and APIs significantly enhances integration capabilities, while advanced AI and deep learning technologies enable the construction of electronic Know Your Customer (eKYC) or remote access authentication systems with over 99% accuracy using facial biometrics, which simplifies user interactions.

The Airlock Secure Access Hub is a robust solution that protects applications, APIs, and data from identity theft and common cyber threats targeting web interfaces. It strikes a balance between security and ease of use, enabling a smooth customer experience with functionalities like single sign-on, social registration, extensive self-service options, and efficient consent management. In a rapidly evolving marketplace, quick adaptability is crucial, which is why the Airlock Secure Access Hub integrates essential security measures, including user registration, authentication, and self-service capabilities, allowing organizations to optimize their IT resources for better business performance. Moreover, the platform is meticulously crafted to comply with multiple international regulations, such as GDPR, PSD2, PCI-DSS, OWASP, and MAS, by acting as a centralized hub for enforcing access policies, thus simplifying compliance without necessitating individual adjustments for every application. This all-encompassing solution not only strengthens security but also significantly improves user satisfaction by providing a consistent access experience across various platforms, ultimately fostering greater trust and engagement with users. Additionally, the Airlock Secure Access Hub continuously evolves to address emerging security challenges, ensuring that organizations remain resilient in the face of new threats.

Strata's Maverics Identity Orchestration Platform transforms the management of identity integrations across multiple cloud platforms by providing a strong, distributed, multi-cloud identity framework. Serving as an abstraction layer, Maverics effectively links different identity management systems, ensuring that a variety of policies, APIs, and sessions operate in harmony. While managing identities for an enterprise can often be intricate, the task of implementing effective identity solutions in multi-cloud environments has become much more manageable. As businesses increasingly transition to distributed architectures, the emergence of identity silos presents challenges, particularly when applications are deployed across diverse cloud providers like Microsoft Azure, AWS, and Google Cloud, each hosting its distinct identity framework. The complexities of incorporating legacy on-premises applications further exacerbate the difficulties of managing distributed identities. Maverics offers a forward-thinking approach to address these identity management obstacles specifically within multi-cloud contexts, facilitating streamlined processes and boosting operational efficiency for businesses aiming to consolidate their identity systems. By effectively connecting various identity solutions, Maverics allows organizations to concentrate on their primary business activities without being hindered by identity-related issues, paving the way for greater innovation and productivity. Ultimately, this platform empowers enterprises to navigate the evolving digital landscape with confidence.

Digital transformation brings with it a wealth of efficiencies and potential for value creation, but it also presents notable obstacles, especially regarding the secure management of information access, both internally and externally. IT departments find themselves responsible for controlling user access to a range of applications, whether they are hosted internally or in the cloud, catering to the needs of employees, customers, and trading partners alike. In the current digital landscape, every person, system, and device must possess a distinct digital identity. The OpenText Identity and Access Management (IAM) Platform equips businesses with essential tools to monitor all digital identities that are seeking access to their systems and applications. By adopting OpenText IAM, organizations can ensure that their information access is manageable, governable, and transparent. This solution not only facilitates the creation and management of user accounts, roles, and access permissions for individual users, but also extends to systems and devices. The most effective IAM solutions adeptly handle both employee identities within a company and those across a wider business ecosystem of customers and partners. Additionally, IAM is vital for managing the identities of IoT devices, which are essential for their secure incorporation into the digital realm. As the need for digital interactions rises, the significance of a solid identity and access management framework becomes increasingly critical. This growing reliance on digital connectivity makes the strategic implementation of IAM not just beneficial, but essential for ongoing organizational success.

From the outset, it is essential to engage employees and address the barriers that impede teamwork. Leveraging both current and historical data for access management can result in reduced compliance costs while also empowering the workforce. Adopting a passwordless enterprise identity and access management system provides a comprehensive solution for overseeing employee lifecycle events—such as onboarding, transitions, or departures—while safeguarding sensitive information and ensuring that individuals receive only the necessary access to perform their jobs effectively. It's important to identify any atypical or suspicious behaviors from users and entities, as this vigilance is crucial for maintaining security. Clearly defining job roles can guarantee that employees have the correct level of access and the information required for their tasks. Moreover, a specific identity management system designed for non-employee stakeholders and corporate resources should be implemented to facilitate smooth collaboration across the organization, ultimately improving data integrity and reducing complications. Establishing a reliable source for all non-employee identities is critical, and conducting thorough due diligence regarding identity management is equally important. Additionally, it is vital to monitor all identity lifecycle events tied to individuals and assets, encompassing engagement, transitions, disengagement, and re-engagement, to cultivate a secure and efficient workplace. By doing this, organizations can better synchronize their access strategies with their operational objectives, leading to improved overall performance and security. A proactive approach to managing these elements can significantly enhance organizational productivity and trust.

MyID® credential management software enables both governments and large enterprises to issue and manage digital identities through secure multi-factor authentication techniques for citizens, large workforces, and supply chains. At present, MyID supports millions of users with strong authentication, allowing them to access essential data, systems, and networks. For information security experts, MyID provides an easy integration process and effective management of digital identity issuance. End users, which include both citizens and employees, enjoy seamless and secure access to organizational systems and resources via multi-factor authentication across various devices. In a time when the threat of cyber terrorism, identity fraud, and criminal acts is on the rise, MyID® emerges as a trustworthy solution for credential management, prioritizing cybersecurity. With its exceptional features—security, reliability, and interoperability—MyID continues to be a leading option in the industry. Therefore, when it comes to ensuring the highest standards of data protection, MyID is the trusted choice for organizations seeking effective identity management solutions. By focusing on user-friendly experiences while maintaining stringent security measures, MyID fosters confidence among its users.

Take control of your online digital identities with the Sovrin Network, an initiative designed to create a global public resource for self-sovereign identity management. We find ourselves at a crucial juncture, where it is essential to move past outdated methods plagued by fragmented identities, countless passwords, and unreliable data systems. The time for secure and seamless identity verification through self-sovereign identity has finally arrived. The Sovrin Network establishes a fresh standard for digital identity, integrating the reliability, personal independence, and convenience associated with conventional identification methods like driver's licenses and ID cards into the digital space. Crafted as a metasystem, Sovrin enables various applications to empower individuals, organizations, and even objects to authenticate their identities using trustworthy and verifiable digital credentials. The concept of “self-sovereign” emphasizes that individuals retain ownership and control over their credentials, allowing them to use them at their discretion without needing to obtain permission from any third party. By placing this level of authority in the hands of users, the Sovrin Network has the potential to transform our interactions with digital identity, making them both more efficient and secure. This innovative approach not only enhances privacy but also fosters an environment where trust can flourish in the digital landscape.

Digital identity is the representation of an individual or organization in the online realm, acting as a technological link between their real-world existence and their digital presence on the internet. This concept plays a crucial role in the identification of users online, connecting them to a variety of internet-based services. The traditional practice of memorizing numerous usernames and passwords for accessing different platforms is becoming obsolete; digital identity systems provide a more dependable method for verifying users' identities, ensuring secure entry to digital services. Furthermore, the adoption of digital identities is beneficial for governments, public entities, and private sectors like banking, fintech, and online gaming, as it helps prevent fraud while complying with strict regulatory requirements, all while being accessible to a wide range of users. As these digital identity frameworks continue to advance, they not only bolster the security and trustworthiness of online interactions but also contribute to a more user-friendly digital landscape, facilitating smoother experiences for everyone involved. The ongoing development of these systems promises to further streamline online processes, making the digital world more efficient and secure for all.