Authenticating Business Users

Cloudentity enables organizations to ehnance their B2B platforms with effortless login flows, robust security measures, and countless integration patterns. Whether you have a workforce that needs to sign in to your HR portal, partners using your platform, or customers logging into your platform, you can adjust your authentication experience to each user pupulation to cater to different needs.

For businesses, Cloudentity offers:

• Variety of authentication methods including passwordless authentication.

• Vast number of different Enterprise Authentication/Identity Providers to choose from including Azure AD, Okta, and more.

• Authentication flow control

• SAML integration

• Single Sign On (SSO)

• Federated Identity with Token Normalization Capabilities

• Adaptive Two Factor Authentication (2FA) mechanisms with the use of authorization policies to ask users for additional authentication method if needed.

Login Flow Control

Cloudentity enables administrators to adjust the login flow for users so that it can be optimized and user-friendly.

Multiple Identity provider integrations can be configured at the workspace level opening a flexible way to integrate with multitude of identity providers within the organization or to allow partner-level identity providers. The workspace-level integration enables the organization to utilize a distinct source of the user data for administrators, service owners, developers (including the third-party ones), and consumers, ensuring a distinct separation of the duties enforcement.

To adjust the authentication flow to business needs, you can:

• Ask users to provide their company name first and redirect them to their login page.

• Enable IDP discovery which allows to configure a set of email domains for an IDP. Based on that list, the user is suggested and optionally redirected to an appropiate authentication endpoint.

  IDPs for @boshift.com	IDPs for @donnerx.com

• Set Up an Intelligent Identity Surce Selection for Users by, for example, displaying selected identity sources based on specific email domain, specific client application, incoming IP address, and more.

SAML Integration

SAML continues to be one of the most used Single Sign-On (SSO) protocols around, especially with large enterprises and government institutions. It benefits, for example, include improved user experience (the user needs to sign in only once to access multiple service providers), increased security (authentication happens only at a secure identity provider), and more.

Cloudentity allows you to:

• Connect multpile preconfigured SAML-based Identity Providers or use our generic SAML IDP connector which you can use to connect to any SAML-based IDP.

• Connect SAML service providers (applications).

Single Sign On (SSO)

Cloudentity can act as identity provider and integrates seamlessly with external identity and authentication providers using open standards such as OIDC, SAML, and SCIM or custom connectors. This way we enable your platform requests to be authorized on top of authentication from users authenticated from any source including a direct customer(B2C), business partner customer(B2B2C), or any customer/user model you want to use.

Additionally, you can set up Persistent User Sessions – allowing the user to log in just once to an application connected to Cloudentity and use the resulting session as a proof of authentication to all applications in the workspace for as long as the session is valid, thus removing the need to re-authenticate when the user wants to use another app.

Federated Identity with Token Normalization

Cloudentity enables you to standardize user data from various IDPs. Each IDP conveys authentication data differently, depending on its type and configuration. This data is mapped to a standardized schema in Cloudentity, the authentication context, which simplifies policy validation and claim definitions. Cloudentity provides a predefined authentication context schema and standard attribute sets for each IDP, saving you the effort of creating one from scratch.

Login Page Branding and Customization

Organizations can effortlessly align their branding without the hassle of creating individual login pages—thanks to the customizable login page offered by Cloudentity. Tailor your sign-in page to seamlessly blend with your application’s aesthetic. Right out of the gate, you have the ability to modify the logo, fonts, and color palette featured on the login page. For those looking to take branding a notch higher, crafting a custom theme for more advanced customizations is also within easy reach.