To satisfy our customers’ requirement for safe login to Console, we have altered the claim platform to integrate Single Sign On (SSO) with Azure Active Directory (AAD).
An OAuth2.0 solution has been implemented to this effect. This ensures that leaving employees can be blocked from accessing the system by the customers themselves. They can simply disable them in their own AAD rather than duplicate effort by blocking their access on Console in addition.
Legacy login methods (email and password) have been blocked for those logging in through SSO but maintained for external clients requiring access to the system. Two factor authentication (2FA) has been implemented for them, asking them to enter an additional authorisation code.
A full log of login details is available to our customers at all time.