Active Directory-based single sign-on for cloud applications

With cloud technology taking the IT world by storm, most enterprises use different cloud applications for various tasks. These web applications usually force users to comply with different password complexity requirements. Consequently, users can end up struggling to juggle different passwords for each of their cloud accounts. Keeping track of all these passwords is a daunting task. Wouldn't it be nice to have just a single set of credentials to access all accounts, without having to worry about security? We thought so too.

ADSelfService Plus' single sign-on (SSO) feature integrates your users' cloud accounts with their Active Directory (AD) account so they can enjoy a consistent logon process across apps. The solution provides users secure access to all SAML-enabled cloud applications, including Microsoft 365, Google Workspace (formerly G Suite), Salesforce, and SAP NetWeaver. This means that they don't have to deal with remembering multiple passwords of varying lengths and complexities.

AD as an identity provider for SSO

ADSelfService Plus uses the SAML protocol to communicate with your users' cloud applications and provide single sign-on capabilities. Once configured, anytime users try to log on to cloud software, they will be redirected to the ADSelfService Plus server, which authenticates their accounts. Once redirected, all they have to do is provide their AD credentials to gain access to their cloud accounts (Watch video).

Enable multi-factor authentication for cloud apps

In addition to the AD credentials, authentication methods such as SMS and email-based verification codes, Google Authenticator, YubiKey, and fingerprint authentication can be used to enable multi-factor authentication for cloud application logins. ADSelfService Plus supports 15 methods of identity verification for multi-factor authentication. This additional verification helps to further improve the security of cloud app logins without spending money on other third-party tools.

OU- and group-based policies for access control

In ADSelfService Plus, you can create security policies for SSO based on AD OUs and groups. These policies determine who gets access to which cloud application. For example, you can create and enforce a policy that provides access to your company's HR application only to users in the HR OU. You can create multiple policies and safely provide access to critical business applications to only those users who need them.

Conditional access based on user risk factors

Through conditional access policies, you can also choose to enable or restrict SSO based on users' risk factors, such as IP address, time of access, device type, and geolocation. For example, you can choose to restrict SSO for untrusted IP addresses or choose to enable it only during business hours.

SSO for custom applications

ADSelfService Plus provides AD-based SSO for any SAML-enabled application. If your custom application supports SAML, that means you can use ADSelfService Plus to provide SSO to that application.