Universal SSO Integration

Extend modern authentication to every application and resource with native identity provider integration. Enable SSO for legacy apps, non-web services, and critical infrastructure that don't support SAML.

Complete SSO Coverage

Native integration with leading identity providers and universal SSO protection for all applications, services, and infrastructure

Identity Provider Integration

Native support for Azure AD, Okta, Ping, and any SAML/OIDC-compatible identity provider with automatic user and group synchronization.

  • • Azure AD native integration
  • • Okta and Ping Identity support
  • • SAML 2.0 and OIDC protocols
  • • Group-based policy creation

Legacy Application SSO

Extend modern SAML authentication to applications that don't support SSO, eliminating insecure basic authentication.

  • • Non-SAML application protection
  • • Basic authentication elimination
  • • Seamless user experience
  • • Gateway-enforced authentication

Continuous Authorization

Extend authorization beyond login to every resource interaction, enabling real-time access termination when risk increases.

  • • Per-request authorization
  • • Real-time access decisions
  • • Risk-based termination
  • • Zero Trust architecture

Multiple Concurrent Identity Providers

Support unlimited independent identity providers simultaneously for large enterprises with multiple domains and organizational units

Enterprise-Scale Identity Management

Large enterprises often require authenticating users from independent domains. iboss integrates with unlimited identity providers concurrently, automatically routing users to the correct provider based on the requested resource.

Unlimited Providers

Integrate with unlimited SSO identity providers concurrently without platform limitations.

Resource Mapping

Assign groups of applications and services to specific identity providers through policy configuration.

Automatic Routing

Automatically redirect users to the appropriate identity provider based on the resource being accessed.

Identity Provider Correlation

Advanced logging associates each access event with the specific identity provider used, enabling proper attribution even with overlapping usernames across domains.

Provider Attribution

Every log event includes the identity provider used for authentication correlation.

Domain Separation

Handle overlapping usernames across multiple organizational domains seamlessly.

Security Operations

Enhanced incident response with complete authentication context and provider correlation.

Native Identity Provider Support

Seamlessly integrate with popular identity providers and automatically synchronize users and groups for dynamic security policy application.

Supported Platforms

  • Microsoft Azure AD
  • Okta Identity
  • Ping Identity
  • SAML 2.0 providers
  • OIDC providers
  • Federated Identity services

Advanced Capabilities

  • Automatic user and group synchronization
  • Group-based security policy creation
  • Dynamic access control based on group membership

Step-Up Authentication

Dynamically require higher levels of authentication confidence based on the resource being accessed, location risk, or security context to prevent unauthorized access to critical applications.

Resource-Based MFA

Automatically require Multi-Factor Authentication for highly sensitive resources and critical applications.

Location-Based Authentication

Force higher confidence authentication when users access resources from high-risk locations.

Automatic Redirection

Seamlessly redirect users to identity providers for step-up authentication when required.

Universal SSO for All Applications

Eliminate security gaps by extending modern authentication to legacy apps, non-web services, and critical infrastructure

Legacy Web Applications

Force SAML authentication before users can access applications that don't support modern SSO protocols.

  • • Basic authentication elimination
  • • Gateway-enforced SSO
  • • Seamless user experience

Non-Web Services

Protect RDP, SSH shells, databases, and other critical services with mandatory SSO authentication.

  • • Remote Desktop Protocol (RDP)
  • • SSH shell access
  • • Database connections

OT & IoT Infrastructure

Secure operational technology and IoT devices with SSO requirements for administrator access.

  • • Industrial control systems
  • • IoT device management
  • • Critical infrastructure protection

Beyond Login Authorization

Traditional identity providers only authenticate at login. iboss extends authorization to every resource interaction for true Zero Trust security.

Continuous Visibility

Monitor every user-resource interaction with detailed logging and attribution.

Real-time Risk Response

Instantly terminate access when devices become infected or risk levels increase.

NIST 800-207 Compliance

Implements true Zero Trust Architecture with per-request access decisions.

Enhanced Logging & Attribution

Every resource interaction generates detailed logs with user attribution from identity providers, enabling rapid incident response and comprehensive auditing.

User Attribution

Username and group information logged with every event for complete user activity tracking.

SIEM Integration

Forward enriched logs to external SIEM and logging databases with identity context.

Rapid Response

Quickly associate security events with specific users to reduce incident response times.

Group-Based Policies Tied to Identity Providers

Create differentiated role-based policies that enable productivity while maintaining security, automatically assigned based on Azure AD and SAML provider groups

Role-Based Internet Access for Every Department

Each department within an organization typically needs varying levels of Internet access depending on what the job entails. Single "one size fits all" policies are overly prohibitive and reduce productivity.

Tailored Access Roles

Create customized web access policies that match each department's specific job requirements and productivity needs.

Automatic Assignment

Policies are seamlessly assigned to users with low friction, ensuring a great user experience.

Compliance & Security

Maintain security from malware and threats while ensuring regulatory compliance requirements.

Active Directory Integration

Policies can be tied to Active Directory, eDirectory, or any LDAP-enabled database to quickly assign policies based on existing organizational structure.

Organizational Units (OUs)

Link policies to Active Directory Organizational Units to map existing organizational structure to secure Internet access policies.

Security Groups

Assign differentiated policies to Active Directory Security Groups for granular access control and management.

LDAP Compatibility

Support for any LDAP-enabled database including eDirectory for flexible identity integration.

SAML Group Assignment

Use SAML to link policies to specific users or groups, eliminating the need to open firewalls to allow access to Active Directory server instances.

No Firewall Changes

SAML eliminates the need to open firewalls for Active Directory server access.

Automatic Extraction

Automatically extract user and group information from SAML for policy assignment.

Location Independent

Group policies follow users wherever they roam across locations and devices.

Dynamic Authentication Requirements

Ensure the right level of identity confidence by automatically stepping up authentication based on resource sensitivity, location risk, and security context

Resource-Based MFA

Create policies for specific resources or groups of resources that require multi-factor authentication to prevent identity hijacking.

  • • Highly sensitive resource protection
  • • Critical application security
  • • Identity hijacking prevention

Location-Based Authentication

Automatically require higher confidence authentication when users access resources from high-risk or unusual locations.

  • • High-risk location detection
  • • Adaptive security policies
  • • Context-aware access control

Seamless Redirection

When authentication requirements aren't met, users are automatically redirected to the integrated identity provider for step-up authentication.

  • • Automatic identity provider redirect
  • • Seamless user experience
  • • Post-authentication access grant

Identity Confidence Assurance

Reduce risk of unauthorized access to critical applications by ensuring the appropriate level of identity confidence for each resource interaction

Speed Bump & Exception Management

Balance security with productivity through self-service access options and business-justified exception processes

Speed Bump Feature

Users can easily gain access to content through speed bump warnings that provide context about potential risks.

  • • Self-service access with warnings
  • • Educational risk context
  • • Reduced IT support burden

Exception Requests

Allow users to request exceptions with business justification comments for administrative review and approval.

  • • Business justification comments
  • • Administrative review process
  • • Complete exception audit trail

Extend Modern Authentication Everywhere

Eliminate authentication security gaps with universal SSO support for all applications, services, and infrastructure. Enable continuous authorization and comprehensive logging with identity attribution.