Admin By Request Features

Process of providing credentials and logging into multiple systems is easy and intuitive for users

Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.

Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case

Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials.

Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider.

Provides ability to control access to PC's, Mobile devices, and other endpoint devices.

Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network.

Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network.

Controls access to users that are not company employees that are either within the companies local area network or outside the network

Enables users to use their own device to access company applications.

Installation process is easy and flexible.

Options for resetting and enforcing password policies

Provides Administration tools/console that are easy to use and learn for routine maintenance tasks

Easily provisions new systems, platforms or applications using configuration and not customization.

Users can set, change passwords without interaction from IT staff

Creates access requirements and standards and establishes user, roles, and access rights.

Allows administrators to approve or reject access changes to using defined workflows.

Automates provisioning and deprovisioning to reduce the amount of administrative manual work.

Reduces manual administrative work.

Manages identity information from on-premise and cloud applications.

Automatically allows access if users meet policy requirements.

Supports Endpoint access control to multiple operating systems

Allows user authentication to be honored by all the hosts in two or more domains

Support access to browser based applications across required browser types

Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate

Contains pre-built and custom reporting tools to required to manage business

Provides mechanism for auditing authentication for trouble shooting purposes.

Can call and pass credentials to third party web services.

Sends a one-time passcode (OTP) via SMS.

Provides a one-time passcode (OTP) via voice-call.

Sends a one-time passcode (OTP) via email.

Supports hardware tokens, which are often USB-sized, fob-like devices that store codes.

Offers software tokens, which are applications installed on a mobile phone, wearable devices, or desktops and generate time-based one-time passcodes (TOTP) that a user can easily copy. Software tokens work both online and offline.

Allows biometric factors such as fingerprints, faceprints, voiceprints, or other biometric information to be used as an authentication factor.

Offers mobile push authentication, which is a user-friendly method that does not require a user to copy a code, but rather accept or deny an authentication using a mobile application. Mobile push authentication only works when a user is connected to the internet.

Analyzes users' IP addresses, devices, behaviors and identities to authenticate a user.

Allows the use of tokens on multiple devices. This feature can also be turned off if the user does not want this.

Offers encrypted backup recovery stored by the vendor.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate.

Provides a single access point for users to access multiple cloud products without multiple logins.

Enables users to bring-your-own-device to access company applications.

Ensures that credentials are centrally stored (in a secure vault) and when changed, that systems remain connected.

Allows privileges based on roles, such as business unit or other factors.

Configure which events will trigger a notification to prevent privileged access abuse in real-time.

Offers live session recording and playback for compliance and auditing purposes.

Offers the option to hide passwords when sharing with users, such as contract workers

Allows for temporary privileges for a defined task or period of time, to reduce the risk of credential abuse.

Provides audit logs for compliance reasons.

Monitors, records, and logs both real-time and post-event activity.

Detects abnormal user behavior to mitigate risks.

Creates a comprehnsive log of all activities when utilizing Privileged Access Management Software software.

Includes reporting functionality.

Offers an easy to understand user interface to make setup smooth.

Offers a mobile software development kit (SDK) for iOS, Blackberry, and Android.

Offers a software development kit (SDK) for web-based applications.