cloud applications has attracted the attention of hackers, who are now turning their attention to data in the cloud. Hackers can easily scam someone with a valid username and password through phishing attacks. Authenticating users with username and password is no longer useful.
Data leakage
1. Protect the security of cloud login
ADSelfService Plus is an Active Directory self-service password management and single sign-on (SSO) solution, using multiple identities Verify to secure access to cloud applications. By enabling SSO between ADSelfService Plus and SAML 2.0 enabled cloud applications, you can easily protect users' identities in the cloud. When SSO is enabled, users must always authenticate themselves in ADSelfService Plus — first with their username and password, and then with another method of authentication of your choice. Only in this way can end users access cloud applications.
ADSelfService Plus
2. Working principle
- Before you can access cloud applications, users must first use Windows Active Directory after enabling SSO The y-domain credentials are logged in to ADSelfService Plus to prove its identity.
- Next, users must authenticate themselves with Duo Security, RSA SecurID, smart card, RADIUS, SMS/email-based verification code or Google Authenticator.
- Once successfully logged in, users can access cloud applications from the Applications tab. All they have to do is click on the app icon to open it in a new tab. The biggest advantage is that users can automatically log in to the application.
Even if the user enters their URL directly into the browser and tries to access the SSO-enabled cloud application, they will redirect to the ADSelfService Plus login page for authentication.
Authentication
3. A comprehensive set of authentication factors
ADSelfService Plus uses tried and tested Windows Active Directory domain credentials Certificate is the first factor in identity verification. For the second factor, ADSelfService Plus supports native identity. For example, SMS/email-based verification codes, as well as third-party authentication programs (e.g. Duo Security, RSA SecurID, RADIUS server, and Google Authenticator).
Active Directory
4. Access cloud applications based on policy
ADSelfService Plus Single Sign-O based on local Active Directory U and group structure to help you activate multi-factor authentication for cloud applications. You can customize different authentication factors for different users, and even control access to cloud applications by configuring OU and group-based policies.
