Configuration

This service consists of the following provided features and optional services.

Provided Features
FeaturesDescription
ID ManagementWeb UIs are provided to manage IDs.
Access ControlLogin restrictions and login rules can be changed based on user's IP address.
CustomizationLogo images, footers, background colors, notification email messages sent to users and administrators, and other messages can be customized.
Single Sign-on (SSO)
  • Supports OpenID Connect Core 1.0
  • Supports SAML 2.0
Directory Service Synchronization

This service provides a module to enable synchronization with directory services. Deploy this module to automatically synchronize users, groups, and passwords (for passwords, Active Directory only supported) registered in directory services with this service.

Password Policy Change FunctionPolicies on the passwords that users can configure can be changed as needed.
Options
Option NameFeaturesBilling SystemIntended Use
Premium Federation OptionSingle sign-on (SSO) capability for external services and federation/ID provisioningMonthly fees are charged for each ID.Authentication of users registered in this service can be extended to external services.
Multi-Factor Authentication Option

The following features are provided:

  • FIDO2 authentication utilizing a biometric device, etc.
  • Slide authentication or one-time password authentication utilizing the IIJ SmartKey app
  • One-time password authentication utilizing email
  • Device restrictions based on client certificates
Monthly fees are charged for each ID.

Implementing multi-factor authentication helps to prevent attackers from gaining unauthorized access and enhances security.

Integrated Windows Authentication OptionIntegrated Windows Authentication is available.Fixed monthly feesActive Directory credentials can be used to log into this service as well as linked services.
Integrated Windows Authentication Multi-Region OptionIntegrated Windows Authentication providers can be used in multiple regions.Fixed monthly feesThis improves the redundancy of the Integrated Windows Authentication infrastructure.