AWS Single Sign-On Features
Access Control Types (5)
Endpoint access
Provides ability to control access to PC's, Mobile devices, and other endpoint devices.
-
Local Access
Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network.
Remote Access
Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network.
Partner Access
Controls access to users that are not company employees that are either within the companies local area network or outside the network
Supports BYOD users
Enables users to use their own device to access company applications.
Authentication Options (8)
-
Authentication User experience
Process of providing credentials and logging into multiple systems is easy and intuitive for users
-
Supports Required Authentication systems
Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc.
-
Multi-Factor Authentication
Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.
-
Supports Required Authentication Methods/Protocols
Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case
Federation/SAML support (idp)
Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials.
-
Federation/SAML support (sp)
Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider.
Two-Factor Authentication
Extra layer of security that requires not only a password and username but also something specific to that user
Authentication
Verify the identity of users/devices to enable secure access
Platform (7)
-
Multiple Operating system support
Supports Endpoint access control to multiple operating systems
Multi-Domain Support
Allows user authentication to be honored by all the hosts in two or more domains
-
Cross Browser support
Support access to browser based applications across required browser types
Fail over protection
Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate
Reporting
Contains pre-built and custom reporting tools to required to manage business
Auditing
Provides mechanism for auditing authentication for trouble shooting purposes.
Third Party Web Services support
Can call and pass credentials to third party web services.
Administration (6)
Ease of installation on server
Installation process is easy and flexible.
Password Policy Enforcement
Options for resetting and enforcing password policies
Administration Console
Provides Administration tools/console that are easy to use and learn for routine maintenance tasks
Ease of connecting applications
Easily provisions new systems, platforms or applications using configuration and not customization.
Self Service Password Administration
Users can set, change passwords without interaction from IT staff
Single Sign On
Allow users to access multiple services after entering their login credentials once
Additional Functionality (30)
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Active Directory Integration
Integrates with Active Directory
Multiple User Accounts
Allow multiple users with individual logins and varying permissions to use the same account, software, portal, or service
Data Verification
Process of checking different types of data for accuracy to avoid errors or inconsistencies
Access Management
Control and manage access to company resources
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Secure Data Storage
Securely stores data to prevent data loss or breaches
Data Security
Protect sensitive data for digital privacy
Biometrics
Identify or authenticate a person's identity through biological data such as fingerprints or facial patterns.
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
API
Application programming interface that allows for integration with other systems/databases
Data Synchronization
Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency
Secure Login
At least a username and password is required to access the system
Policy Management
Create, manage, and track policies and procedures within an organization
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Real-Time Data
Receive data and information in real time
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Self Service Portal
Online portal through which end users can access the system, manage tasks, or obtain information
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Employee Onboarding
Process of familiarizing new employees with the company, their position, and responsibilities
Activity Tracking
Track and document all activities across devices, networks, and other systems
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Credential Management
Manage usernames, account numbers, passwords, biometric data, public access keys, and other documentation
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Workflow Management
Create, design and manage workflows for repetitive tasks


