tenfold Is Not an MFA/SSO Provider (But We Do Support It for Logging Into tenfold)
Multi-factor authentication (MFA) is an essential safeguard against account compromise and password-based attacks. Single Sign-On (SSO) reduces login fatigue and helps users get to work faster. As an access goverance solution, tenfold will not help you add MFA or SSO to other apps, but we do support both when it comes to logging into tenfold itself. Everything you need to know about MFA/SSO in tenfold.
Does tenfold Support MFA?
From creating accounts to assigning IT privileges, organizations entrust identity and access management software with highly sensitive tasks and information. As a result, it is only logical to expect your IAM solution to practice good cybersecurity โ from the design stage to secure development processes and daily operations. At tenfold, we take this commitment to security very seriously, as our ISO 27001 certification demonstrates.
With a continuing increase in identity-based attacks ranging from phishing to social engineering, multi-factor authentication plays a critical role in preventing account takeovers and unauthorized logins. For those curious how MFA is implemented in tenfold, here’s a short breakdown.
For Accounts in tenfold: Yes
In order to protect accounts in our IAM platform, tenfold supports the use of app-based MFA to securely authenticate both admins and regular end users who sign into tenfold. MFA can also be enforced as an additional security check for specific actions, such as creating new accounts or assigning new permissions.
In short: Yes, tenfold supports MFA/2FA for accounts in our IAM platform.
For Other Apps Managed With tenfold: No
For external accounts managed through tenfold, such as accounts in Active Directory, Entra ID or various business apps, tenfold allows you to draw on the existing MFA capabilities of these platforms in order to enforce account and security settings. For example, you can add MFA requirements to new Microsoft 365 accounts that are created through automated workflows in tenfold.
However, tenfold is not an MFA solution and cannot be used to add MFA to systems that do not already include it.
So, if your goal is to enhance the login security of applications that do not natively support MFA/2FA, you might need to find another solution. tenfold‘s focus is on governance tasks such as account provisioning, lifecycle management, data access governance, as well as automated access reviews.
More Information on MFA and Login Security
For more information on MFA and login security, please read our guide to multi-factor authentication, including MFA vulnerabilities that allow hackers to bypass these security checks. One strategy that surged in popularity recently is the use of MFA fatigue attacks, which rely on rapidly bombarding users with authentication prompts. You may also be interested to learn how tenfold uses one-time secrets (OTS) to securely share initial passwords with new users.
Does tenfold Support Single Sign-On (SSO)?
With all the applications we use on a daily basis, it can feel like you spend half your day just signing in to different apps. Single Sign-On solutions help organizations save time, reduce login fatigue and enhance login security by providing a central platform that authenticates users against all connected systems.
For Accounts In tenfold: Yes
When it comes to signing into tenfold itself, we do support SSO using Kerberos tokens or OAuth. This means orgs can configure tenfold to allow users to sign in with their existing Active Directory or Entra ID accounts.
For Other Apps Managed With tenfold: No
However, tenfold is not an SSO provider, meaning it can’t be used to authenticate users in any tenfold-managed system. There are many other well-established SSO providers, such as Microsoft’s Entra ID, so you will have to rely on their capabilities for this specific use case. Again, tenfold‘s focus is on access governance and automation, not on login security.
No-Code IAM with tenfold: The Easy Alternative
From automated user lifecycles to a self-service platform for access requests, centralized permission reporting and regular access reviews, tenfold offers comprehensive access governance in one shockingly simple platform.
Our no-code IAM approach allows tenfold to be deployed faster and operated with less staff than comparable solutions . Thanks to off-the-shelf plugins for common IT systems, tenfold easily integrates with your existing IT landscape.
Go from zero to fully automated permission management in just a few weeks! Learn more about the advantages of tenfold by booking a personal demo or signing up for a free trial.
Identity & Access Management Solutions Compared
Our white paper will help you navigate the IAM market, familiarize you with available products and explain key questions to ask yourself when evaluating IAM solutions.