Secure SSO for Cloud Access Using Existing On-Premise Active Directory Identities

The new release of UserLock 11 provides secure single sign-on (SSO) for existing on-premises Active Directory (AD) identities, extending access protection to the cloud. Combined with enhanced multi-factor authentication (MFA) and remote access controls, this new release completes UserLock’s comprehensive security solution – protecting network, remote and cloud access, from anywhere.

• Optimal security and simplicity: Userlock’s secure SSO retains the on-premises Active Directory as the authoritative user directory for access to Microsoft 365 and cloud applications. And, you can rest easy with the ability to deploy SSO backup servers and automatic SSO certificate rollover.
• Enhanced access protection: UserLock’s granular multi-factor authentication (MFA) and contextual restrictions protect SSO access without unnecessarily impeding employees.
• Easy app integration: UserLock SSO is pre-configured to support widely-used cloud apps, and offers the ability to configure non-supported SaaS apps using SAML protocol.
• More secure remote access: New MFA enhancements further protect remote access and help organizations scale MFA across all employees.

Today’s modern hybrid organization relies on Active Directory and the cloud to do business. And with the skyrocketing demand for remote work, IT teams need to streamline access to both the corporate network and cloud applications from wherever employees work.

“This change in user access requirements creates new security risks that can often lead organizations to adopt either complex, costly or disruptive changes,” said François Amigorena, President & CEO of IS Decisions.

“With UserLock, organizations can benefit from an easy-to-use, non-disruptive and affordable SSO solution that builds on their existing investment in Active Directory to effectively secure employee access to both the corporate network and multiple cloud applications.”

On-Site Federated Authentication for Secure SSO

Installed in minutes on a standard Windows server, UserLock SSO supports SAML 2.0 protocol to enable federated authentication of cloud applications. Each user needs to log in only once with their existing AD credentials (and a second factor if MFA is required), to seamlessly access all cloud resources.

• Maintain secure on site authentication, even for remote access
• Enforce accounts, services, roles and group policies
• Keep existing directory, no need to create and manage a new directory for user ID’s
• Retain existing access to resources and applications hosted locally, no need for changes or provisioning

Granular MFA That’s Scalable Across All Users

With UserLock, administrators can define how frequently and under what circumstances to request MFA. MFA is an essential control to establish trust in the user’s identity and reduce account takeover (ATO) risks, and granular controls allow IT leaders to avoid frustrating users with MFA prompts more frequently than necessary.

UserLock 11 adds new enhancements to help organizations scale this granular MFA across all users, with the ability to:

• Enable MFA on more connections: UserLock already makes it easy to enable MFA for Windows logon, RDP, RD Gateway, and VPN connections. It now also supports MFA for VPN connections with RADIUS Challenge and Microsoft IIS Sessions – with protection for a single web application such as Outlook on the Web, RD Web Access, or an entire intranet site.

• Enable MFA in more conditions: To further protect remote users, UserLock’s new web application, UserLock Anywhere, can now prompt MFA on remote machines if VPN connections to the network fail, or if the employee connects remotely without domain access.

• Choose between more authentication methods: UserLock now supports authentication with YubiKey FIPS and Token2 ALU, AZ, and NFC. IT’s also possible to now add an alternative method of second-factor authentication (2FA), such as a YubiKey alongside an authentication app. Administrators can also choose to have MFA backup codes for MFA recovery displayed when a user enrolls.

UserLock’s single sign-on (SSO) and multi-factor authentication enhancements are now available with the release of UserLock 11.

User Logon Security for Windows Active Directory

Enable customized, two-factor authentication (2FA) on Windows logon, Remote Desktop (RDP & RD Gateway), IIS, VPN and Cloud Applications. Apply customized login restrictions by user, group or organizational unit (OU).

Get started with UserLock

Start a free trial with UserLock, with 30-day full version, no user limit, and free technical support.