Addigy Identity - User Authentication and On-Boarding Simplified

Addigy Identity simplifies users' authentication and onboarding at the macOS login window. With Addigy Identity, your users will be able to use the same authentication they use across your environment on their MacOS systems as well. No extra configuration on the Identity Provider side necessary. 


Please note: Addigy Identity is supported by macOS Mojave (10.14) and up.

Addigy Identity: Core functionalities


Cloud-Based Settings


First, The Addigy Identity login window is customizable via our web console at the policy level, this means you can deploy a different background and logo, identity provider authentication, and settings for each one of your policies. This helps In cases, where different departments want to have their own logo and background on the login window of their machines to create a much more tailored experience for their users. This same idea applies to Addigy organizations that are managing multiple companies, each company will have a different logo, background, and identity provider, this is why Addigy identity makes it so easy to customize and deploy different settings via policies. 




Just-In-Time User Creation

Addigy Identity then allows for Just-In-Time user account creation. Once a user authenticates at the login window Addigy Identity automatically creates a local user account with the information that the user's IdPs (Identity Providers) sends back to Addigy Identity, we attach the user's IdP email to the local accounts recordName. If the user already has a local account created, Addigy makes sure the passwords are synced and automatically signs them right into their accounts so they can right back to work with minimal interruption. If they already have a local account, they can sync their IdP email to the already existing local account.




Password Syncing

Addigy Identity will acknowledge password resets deployed from the identity provider at the login window level. We understand that in order to keep proper security hygiene we must enforce a password policy that will require the user to reset their password in X amount of days and comply with the established password rules. This is why we seamlessly enforce IdP level password policies and make it easy for users to comply.



What do the toggles on the top of the Identity page do? 


We're glad you asked! The toggles and their functions are as follows: 


The person toggle allows for local login with established local accounts: 




The refresh button (arrow) allows the Identity window to be reset in the event of any slow loading times or hanging. 


The settings toggle (cogs) allows the user to revert to the normal macOS login window if the setting is enabled in your identity configuration, as well as a Wi-Fi switcher: 





Why do I have to Log in twice? 


Great question! 


Devices that have Filevault enabled will encounter a workflow where both windows must be logged into. 


The FV window must be passed before the Identity window can load, per Apple. 

This is because when the FV screen is met, the device isn't connected to the internet and is in a pre-boot state with the drive needing to be decrypted. 

Users with secure token have to bypass each window upon each login.



At a high level, Addigy Identity secures your MacOS systems, makes it easy for your users to authenticate against MacOS machines, allows for multi-tenant customizability from our web console, allows for tailored designs, simplifies onboarding with just in time account creation,  and enforces security in your organization. 


If you’re ready to get started with Addigy Identity, check out the following KB article:

https://support.addigy.com/support/solutions/articles/8000078530-how-to-enable-addigy-identity


For more information on Addigy Identity Settings look here:

https://support.addigy.com/solution/articles/8000079100-addigy-identity-settings


If you’re interested in what the Experience would be for your users check this out:

https://support.addigy.com/support/solutions/articles/8000079101-addigy-identity-user-experience


If you looking for information on how to configure with Azure Active Directory:

https://support.addigy.com/a/solutions/articles/8000080412




If you have an Addigy account and have additional questions, you can create a ticket by emailing support@addigy.com.

Alternatively, you can submit a support request within Addigy.