Enterprise Authentication Options
Secure access to Passwordstate using Active Directory, Microsoft Entra ID or local accounts, with flexible single sign-on and multi-factor authentication options.
Flexible Authentication for Enterprise Environments
Organizations operate across on-premises, cloud and hybrid environments, each with different identity and access requirements. Passwordstate supports multiple identity models and authentication methods so access policies can be aligned with your existing infrastructure.
Authentication requirements can be configured for different users, security groups and access scenarios, including connections from untrusted IP addresses. This allows organizations to apply stronger authentication controls where additional protection is required.
Supported Identity Sources
Active Directory
Authenticate domain users through Active Directory using supported single sign-on, manual login and MFA-enhanced authentication configurations.
Microsoft Entra ID
Authenticate users through one or more Microsoft Entra ID tenants, supporting modern cloud and hybrid identity environments.
Local Accounts
Use locally managed Passwordstate accounts for standalone, isolated or mixed environments that do not rely exclusively on Active Directory or Entra ID.
Sign-In and Authentication Methods
Single Sign-On
Allow users to access Passwordstate through supported enterprise identity platforms without repeatedly entering their credentials.
Manual Login
Require users to enter their credentials directly when explicit sign-in is preferred or required for a particular access scenario.
Multi-Factor Authentication
Strengthen access using authentication factors such as Duo, RSA SecurID, YubiKey OTP, TOTP, HOTP, RADIUS and SAML-based integrations.
Apply Authentication Based on Access Risk
Passwordstate authentication policies can be tailored to different users, security groups and connection scenarios rather than enforcing one sign-in method for every user.
Organizations can apply additional authentication requirements for higher-risk access, including connections originating from untrusted IP addresses, while maintaining a streamlined experience for approved internal access.
- User-specific authentication policies
- Security group-based configurations
- Trusted and untrusted IP scenarios
- Multiple authentication combinations
Multi-Factor Authentication Options
Passwordstate integrates with a range of hardware, software and identity-provider authentication methods, allowing organizations to select options that align with their security and infrastructure requirements.
RSA SecurID
Integrate Passwordstate with RSA SecurID hardware or software tokens to provide an additional authentication factor during sign-in.
RSA SecurIDYubiKey OTP
Use supported YubiKey devices through Yubico OTP or OATH-based TOTP and HOTP authentication for physical token-based access.
YubicoDuo Authentication
Integrate with Duo to support additional authentication methods such as push notifications, phone calls, hardware tokens and passcodes.
Duo SecurityTOTP and HOTP Tokens
Authenticate using time-based or counter-based one-time passwords generated by compatible hardware tokens, authenticator applications or the Passwordstate mobile apps.
SAML Authentication
Integrate Passwordstate with supported SAML-compatible identity providers, including Microsoft Entra ID, Google, Okta, OneLogin and Active Directory Federation Services.
RADIUS Authentication
Integrate Passwordstate with a RADIUS server to use existing network authentication services and compatible third-party authentication platforms.
ScramblePad Authentication
Require users to align their assigned PIN with a dynamically generated sequence of randomised characters displayed during authentication.
Temporary PIN Code
Send a temporary PIN code to an approved email address or SMS gateway, with the validity period controlled by Passwordstate administrators.
Authentication Benefits for Enterprise Teams
Flexible Configuration
Align Passwordstate authentication with existing identity infrastructure and organizational policies.
Granular Policy Assignment
Apply authentication requirements according to users, security groups and different access scenarios.
Layered Access Security
Combine enterprise identity sources, sign-in methods and additional authentication factors to strengthen access to privileged information.
Evaluate Passwordstate
Download a fully functional 30-day trial and configure Passwordstate authentication for your own enterprise environment.
