¶ Introduction
Exium’s single sign-on (SSO) with Identity and Access Management is aimed at modern applications and services. Users can authenticate with SSO/IAM rather than individual applications. So, the applications don’t have to deal with login forms, authenticating users and storing users. Once logged-in to SSO/IAM, users don’t have to login again to access different applications. Same thing is applicable to sign-out. Exium’s SSO/IAM offers everything a sophisticated user management tool needs – without having to log on repeatedly with every login and into every system-as well as system security, social logins, support for mobile apps and integration into other solutions. Exium’s SSO/IAM have implementations to LDAP and Active Directory as well.
The Benefits of using SSO are listed below:
- Reduce risk for 3rd party sites to access.
- Reduce password debility from the different username and password combinations.
- Reduce time spent for re-entering passwords for the same identity.
- Reduce IT help desk calls for passwords, therefore, IT costs are also reduced.
- Exium’s SSO/IAM also provides MFA (multi-factor authentication) via integrations with FreeOTP, which is a free and open-source software token that can be used for two-factor authentication, as well as Google Authenticator.
- The primary objective of MFA is to reduce the risk of account takeovers and provide additional security for users and their accounts. Since over 80% of cyber breaches happen due to weak or stolen passwords, MFA can provide added layers of security necessary to protect users and their data.
¶ Prerequisites
If you like to leverage MFA, you would need to have at least one of the below one-time password (OTP) Authenticators installed on your mobile device.
- Google Authenticator.
- FreeOTP.
- Microsoft Authenticator.
- LastPass Authenticator.
- Authy.
¶ Installing Free OTP
Install FreeOTP App on your Android or IOS mobile device:
¶ End-user self-registration
This section provides step by step guide for end-users to register with Exium’s Identity and Access Management (IAM) and Single sign-on (SSO) solution.
¶ Registration
Visit the registration page
Click on “Register”
¶ Registration Form
The registration form as shown below should show up.
Fill in all the fields, use your Exium email address, for example, farooq.khan@exium.net
Also, use the before “@” part of your Exium email as the username, for example, “farooq.khan” and Click “Register”
¶ Mobile Authenticator set up
The following screen asking for Mobile Authenticator set up will show up.
Assuming you have already installed the FreeOTP on your Android or IOS mobile device, you can click on the QR code sign on top of the App and scan the QR code presented to you in the below screen.
The FreeOTP app will automatically populate the account name, you tap the app and it will generate a code. Take that code and enter it on the Keycloak page in the one-time-code field and add a name for the device your authenticator app is installed on, and “Submit”.
¶ Email Verification
After submitting the above form, you will be asked to verify your email
¶ Access and manage your account
After email verification, you will be able to access and manage your account as shown below.
¶ Forgot Password?
If you forget your password, you can always change it by clicking on the “Forgot Password” link on the login page. After you click on the “Forgot Password” link, you will receive an email with instructions to set up a new password.
¶ Activate WebAuthn
WebAuthn is the global standard for passwordless authentication, reducing the reliance on passwords to log in to accounts via the web.
Please click on “Link to account update” in the email you received, see example below.
You will be presented with the screen below. Click on “Click here to proceed”
You will be asked to Register the security key, Click on “Register”.
On different platforms (Windows, Mac, Android, IOS etc.), you will be given options (can vary from platform to platform) to create a security key, see example below for windows device offering to use Windows “Hello” as the security key.
Please provide authenticator’s label (or keep the default provided) and click OK.
After completing the above steps, your key is registered and you can log into your account.
To learn more about implementing IAM360 for your organization and explore tailored solutions that meet your unique requirements, contact Exium at partners@exium.net for a consultation or demonstration.