OneLogin

Authorization policies for on-premise and homegrown applications with gateway or agent deployment

Fine-grained policy-based authorization for applications

Create custom privilege definitions at any granularity level

Dynamic mapping of user attributes to application-specific entitlements

Automatically deny access based on defined policies

Enforce granular privileges for apps, users, and roles

API-based privilege assignment and management through roles

Grant access based on user roles with automatic provisioning and deprovisioning

AI-driven access decisions based on user context and risk

Enforce adaptive, risk-based authentication policies

Support for Windows Hello and TouchID biometric authentication

Machine-level authentication using digital certificates

Certificate-based trust and machine-level authentication for desktop devices

Email-based multi-factor authentication

Device-level authentication and identification

SSO support for mobile applications

Multiple authentication factors per policy for enhanced security

Configure multiple MFA strategies and policies

Support for multiple devices per user for MFA

OneLogin's proprietary MFA solution with push notifications

SMS-based authentication and messaging

Voice-based authentication factor

Support for device-bound, synced, and cross-device passkey authentication flows

All passwordless authentication factors including email, SMS, and biometric

Unlimited SAML and OIDC protocol support for application integration

Security question-based authentication factor

Support for shared device scenarios with temporary login

Unified login across all applications and services

Intelligent MFA policy enforcement based on risk assessment

Advanced risk-based authentication with AI-driven threat detection

Allow users to login and register using social identity providers

Time-based one-time password and hardware token support

WebAuthn protocol support for passwordless authentication

Integration with Windows Active Directory for authentication

Custom notifications triggered by workflow events

Transform and map data within workflows

Trigger workflows based on identity and access events

Workflow builder with pre-built templates, event-based triggers, and scheduled tasks

Pre-built templates for common automation scenarios

Schedule workflows to run at specific times or intervals

Intelligent conditional flows for authentication and authorization

Custom hooks for advanced workflow automation

Visual workflow builder for creating custom automation workflows

Directory and identity synchronization with unlimited directory integrations

Centralized cloud-based directory for identity management

Custom directory fields for extended identity attributes

Custom attribute mappings between directories

Bi-directional synchronization between directories and identity sources

Automated provisioning of directory objects and attributes

Synchronize with LDAP directories for identity management

Connect to a single directory source

Connect to unlimited external directories and identity sources

Virtual LDAP endpoint for legacy application support

Comprehensive APIs for application integration and custom development

Full API for privilege creation, reading, updating, and deletion

APIs for authorization decisions and enforcement

API access for managing enforcement points and applications

Build and deploy custom directory connectors

Build custom connectors for API-based applications

Use custom SMTP servers for email delivery

Automatic identity workflows integrated with HR systems like Workday, UKG, Namely, and Bamboo HR

Integration with mobile device management solutions

API for programmatic MFA device registration

6000+ pre-built integrations to popular applications

Integration with third-party MFA providers like Google, Duo, Symantec, and Yubikey

Automatic detection and notification of compromised user credentials

Real-time password security with compromised credential checking

Customizable password policies and enforcement

Customizable security policies for identity management

Support for trusted identity provider configurations

AI-powered threat detection for suspicious behavior and unauthorized access attempts

Custom provisioning rules per application

Automatic password reset for machine accounts

Automatic user account removal and access revocation

Automatic user account creation across connected applications

Custom user attributes for flexible identity management

Automated user provisioning and deprovisioning across applications

Self-service password reset functionality