Addigy Identity - User Authentication and On-Boarding Simplified
Addigy Identity simplifies users' authentication and onboarding at the macOS login window. With Addigy Identity, your users will be able to use the same authentication they use across your environment on their MacOS systems as well. No extra configuration on the Identity Provider side necessary.
Note: Addigy Identity is supported by macOS Mojave (10.14) and up.
Addigy Identity: Core functionalities
First, The Addigy Identity login window is customizable via our web console at the policy level, this means you can deploy a different background and logo, identity provider authentication, and settings for each one of your policies. This helps In cases, where different departments want to have their own logo and background on the login window of their machines to create a much more tailored experience for their users. This same idea applies to Addigy organizations that are managing multiple companies, each company will have a different logo, background, and identity provider, this is why Addigy identity makes it so easy to customize and deploy different settings via policies.
Just-In-Time User Creation
Addigy Identity then allows for Just-In-Time user account creation. Once a user authenticates at the login window Addigy Identity automatically creates a local user account with the information that the user's IdPs (Identity Providers) sends back to Addigy Identity, we attach the user's IdP email to the local accounts recordName. If the user already has a local account created, Addigy makes sure the passwords are synced and automatically signs them right into their accounts so they can right back to work with minimal interruption. If they already have a local account, they can sync their IdP email to the already existing local account.
Addigy Identity will acknowledge password resets deployed from the identity provider at the login window level. We understand that in order to keep proper security hygiene we must enforce a password policy that will require the user to reset their password in X amount of days and comply with the established password rules. This is why we seamlessly enforce IdP level password policies and make it easy for users to comply.
What do the toggles on the top of the Identity page do?
We're glad you asked! The toggles and their functions are as follows:
The person toggle allows for local login with established local accounts:
The refresh button (arrow) allows the Identity window to be reset in the event of any slow loading times or hanging.
The settings toggle (cogs) allows the user to revert to the normal macOS login window if the setting is enabled in your identity configuration, as well as a Wi-Fi switcher:
Why do I have to Log in twice?
Devices that have Filevault enabled will encounter a workflow where both windows must be logged into.
At a high level, Addigy Identity secures your MacOS systems, makes it easy for your users to authenticate against MacOS machines, allows for multi-tenant customizability from our web console, allows for tailored designs, simplifies onboarding with just in time account creation, and enforces security in your organization.
If you’re ready to get started with Addigy Identity, check out the following KB article:
For more information on Addigy Identity Settings look here:
If you’re interested in what the Experience would be for your users check this out:
If you looking for information on how to configure with Azure Active Directory: