Frequently Asked Questions.
Frequently Asked Questions.
What is strong authentication?
Also known as multi-factor authentication, strong authentications adds another factor to the login process, beyond a password. By default, myOneLogin uses encrypted browser cookies or certificates, so you need your laptop, desktop or phone's browser to login. It also provides one-time passwords to your mobile phone, for accessing myOneLogin when you don't have your laptop.
Why use strong authentication?
Strong authentication protects your accounts from passwords attacks like phishing and password guessing. Even if someone discovers your password, they cannot get onto your Google Apps account without the second factor (your laptop, your mobile phone).
How do I know myOneLogin is secure?
TriCipher's patented multi-part authentication technology is used by banks and financial institutions to protect online transactions.
The myOneLogin service has been certified by independent, third-party experts as using best practices to protect users from phishing.
What is a VIP mobile token?
VeriSign offers VIP Access for Mobile free for Google Apps Premier access as part of this service. A smart phone user downloads the VIP Access for Mobile application to their phone. Their phone then generates a one-time passwords that act as a second token for logging in – even when the phone is out of cellular coverage. The VIP solution essentially turns the cell phone into a physical authentication factor.
How does myOneLogin authenticate users with Google Apps?
Once you put the myOneLogin service in Production mode (in our administrative interface), myOneLogin and Google Apps communicate using SAML, a secure federation standard. We don't send any passwords back and forth, and we don't store Google Apps passwords in the myOneLogin service.
Can I switch back?
Sure. If you are using Production Mode in myOneLogin, simply click on strong Auth Test Off and it will set your Google Apps accounts to not use myOneLogin. If your users have used the myOneLogin change password feature to set a complex password for IMAP/POP clients, then they will need to use that password to access Google Apps.
Can my employees access Google Apps without myOneLogin?
Once you turn on single sign-on within Google Apps, they have to use myOneLogin to connect to Google Apps. There is an optional setting in Google Apps (Network Masks in the SSO Setup screen) by which you can allow a range of IP addresses to bypass strong authentication, if you wish.
Does myOneLogin work with browsers on mobile phones?
Yes, it does – your phone's browser can be used to strongly authenticate the user and access Google Apps.
What kind of credentials do you use for two-factor authentication?
You have three choices for the second factor:
• Encrypted browser cookies
• Encrypted browser certificates
• One-time passwords using VIP Access for Mobile.
Can I add other applications to myOneLogin?
You can get single sign-on to all of your web applications by upgrading to the full myOneLogin Secure Single Sign-on service. This service works with over 2,000 web applications and counting. Once you have upgraded, if you do not see an application that you need, you can add actually add applications using the myOneLogin bookmarklet.
Can I put our own logo or messages on the myOneLogin page?
Yes, you can customize the landing page that your users see with your own logo.
Why does this service require Google Apps Premier or Education Edition?
This free Strong Authentication offer uses the SAML-based single sign-on capability of Google Apps Premier Edition or Education Edition, not available in standard editions.
What if I'm not using Google Apps Premier Edition or Education Edition?
You can use the full myOneLogin Secure Single Sign-On service to get web single sign-on to Google Apps and all of your web applications. Using standard Google Apps accounts, the myOneLogin service stores your encrypted Google Apps credentials in its secure service and uses this information to provide single sign-on with strong authentication to Google Apps and other web applications. You can integrate this service with your internal directories as well. You can get a free 30-day trial of the myOneLogin service to see if it works for you.
Requirements.
• Google Apps Premier or Education Edition
• Google Apps admin account
Get started now.
Get this risk-free service now. You can cancel at any time.
