## Universal SSO Integration Extend modern authentication to every application and resource with native identity provider integration. Enable SSO for legacy apps, non-web services, and critical infrastructure that don't support SAML. ## Complete SSO Coverage Native integration with leading identity providers and universal SSO protection for all applications, services, and infrastructure ### Identity Provider Integration Native support for Azure AD, Okta, Ping, and any SAML/OIDC-compatible identity provider with automatic user and group synchronization. - • Azure AD native integration - • Okta and Ping Identity support - • SAML 2.0 and OIDC protocols - • Group-based policy creation ### Legacy Application SSO Extend modern SAML authentication to applications that don't support SSO, eliminating insecure basic authentication. - • Non-SAML application protection - • Basic authentication elimination - • Seamless user experience - • Gateway-enforced authentication ### Continuous Authorization Extend authorization beyond login to every resource interaction, enabling real-time access termination when risk increases. - • Per-request authorization - • Real-time access decisions - • Risk-based termination - • Zero Trust architecture ## Multiple Concurrent Identity Providers Support unlimited independent identity providers simultaneously for large enterprises with multiple domains and organizational units ### Enterprise-Scale Identity Management Large enterprises often require authenticating users from independent domains. iboss integrates with unlimited identity providers concurrently, automatically routing users to the correct provider based on the requested resource. #### Unlimited Providers Integrate with unlimited SSO identity providers concurrently without platform limitations. #### Resource Mapping Assign groups of applications and services to specific identity providers through policy configuration. #### Automatic Routing Automatically redirect users to the appropriate identity provider based on the resource being accessed. ### Identity Provider Correlation Advanced logging associates each access event with the specific identity provider used, enabling proper attribution even with overlapping usernames across domains. #### Provider Attribution Every log event includes the identity provider used for authentication correlation. #### Domain Separation Handle overlapping usernames across multiple organizational domains seamlessly. #### Security Operations Enhanced incident response with complete authentication context and provider correlation. ## Native Identity Provider Support Seamlessly integrate with popular identity providers and automatically synchronize users and groups for dynamic security policy application. ### Supported Platforms - Microsoft Azure AD - Okta Identity - Ping Identity - SAML 2.0 providers - OIDC providers - Federated Identity services ### Advanced Capabilities - Automatic user and group synchronization - Group-based security policy creation - Dynamic access control based on group membership ### Step-Up Authentication Dynamically require higher levels of authentication confidence based on the resource being accessed, location risk, or security context to prevent unauthorized access to critical applications. #### Resource-Based MFA Automatically require Multi-Factor Authentication for highly sensitive resources and critical applications. #### Location-Based Authentication Force higher confidence authentication when users access resources from high-risk locations. #### Automatic Redirection Seamlessly redirect users to identity providers for step-up authentication when required. ## Universal SSO for All Applications Eliminate security gaps by extending modern authentication to legacy apps, non-web services, and critical infrastructure ### Legacy Web Applications Force SAML authentication before users can access applications that don't support modern SSO protocols. - • Basic authentication elimination - • Gateway-enforced SSO - • Seamless user experience ### Non-Web Services Protect RDP, SSH shells, databases, and other critical services with mandatory SSO authentication. - • Remote Desktop Protocol (RDP) - • SSH shell access - • Database connections ### OT & IoT Infrastructure Secure operational technology and IoT devices with SSO requirements for administrator access. - • Industrial control systems - • IoT device management - • Critical infrastructure protection ### Beyond Login Authorization Traditional identity providers only authenticate at login. iboss extends authorization to every resource interaction for true Zero Trust security. #### Continuous Visibility Monitor every user-resource interaction with detailed logging and attribution. #### Real-time Risk Response Instantly terminate access when devices become infected or risk levels increase. #### NIST 800-207 Compliance Implements true Zero Trust Architecture with per-request access decisions. ## Enhanced Logging & Attribution Every resource interaction generates detailed logs with user attribution from identity providers, enabling rapid incident response and comprehensive auditing. #### User Attribution Username and group information logged with every event for complete user activity tracking. #### SIEM Integration Forward enriched logs to external SIEM and logging databases with identity context. #### Rapid Response Quickly associate security events with specific users to reduce incident response times. ## Group-Based Policies Tied to Identity Providers Create differentiated role-based policies that enable productivity while maintaining security, automatically assigned based on Azure AD and SAML provider groups ### Role-Based Internet Access for Every Department Each department within an organization typically needs varying levels of Internet access depending on what the job entails. Single "one size fits all" policies are overly prohibitive and reduce productivity. #### Tailored Access Roles Create customized web access policies that match each department's specific job requirements and productivity needs. #### Automatic Assignment Policies are seamlessly assigned to users with low friction, ensuring a great user experience. #### Compliance & Security Maintain security from malware and threats while ensuring regulatory compliance requirements. ### Active Directory Integration Policies can be tied to Active Directory, eDirectory, or any LDAP-enabled database to quickly assign policies based on existing organizational structure. #### Organizational Units (OUs) Link policies to Active Directory Organizational Units to map existing organizational structure to secure Internet access policies. #### Security Groups Assign differentiated policies to Active Directory Security Groups for granular access control and management. #### LDAP Compatibility Support for any LDAP-enabled database including eDirectory for flexible identity integration. ### SAML Group Assignment Use SAML to link policies to specific users or groups, eliminating the need to open firewalls to allow access to Active Directory server instances. #### No Firewall Changes SAML eliminates the need to open firewalls for Active Directory server access. #### Automatic Extraction Automatically extract user and group information from SAML for policy assignment. #### Location Independent Group policies follow users wherever they roam across locations and devices. ### Dynamic Authentication Requirements Ensure the right level of identity confidence by automatically stepping up authentication based on resource sensitivity, location risk, and security context #### Resource-Based MFA Create policies for specific resources or groups of resources that require multi-factor authentication to prevent identity hijacking. - • Highly sensitive resource protection - • Critical application security - • Identity hijacking prevention #### Location-Based Authentication Automatically require higher confidence authentication when users access resources from high-risk or unusual locations. - • High-risk location detection - • Adaptive security policies - • Context-aware access control #### Seamless Redirection When authentication requirements aren't met, users are automatically redirected to the integrated identity provider for step-up authentication. - • Automatic identity provider redirect - • Seamless user experience - • Post-authentication access grant #### Identity Confidence Assurance Reduce risk of unauthorized access to critical applications by ensuring the appropriate level of identity confidence for each resource interaction ### Speed Bump & Exception Management Balance security with productivity through self-service access options and business-justified exception processes #### Speed Bump Feature Users can easily gain access to content through speed bump warnings that provide context about potential risks. - • Self-service access with warnings - • Educational risk context - • Reduced IT support burden #### Exception Requests Allow users to request exceptions with business justification comments for administrative review and approval. - • Business justification comments - • Administrative review process - • Complete exception audit trail ## Extend Modern Authentication Everywhere Eliminate authentication security gaps with universal SSO support for all applications, services, and infrastructure. Enable continuous authorization and comprehensive logging with identity attribution.