One tool for the apps your other tools miss.
Most organisations run cloud single sign-on for their modern apps and a password manager for everything else. Here's how My1Login compares with both, and how it works alongside Microsoft Entra ID.
Two tools, or one that covers both.
Many organisations end up paying for both kinds of tool, and still have apps neither one reaches.
Cloud SSO platforms
e.g. identity providers with an app gallery
Good at
- One sign-in for apps that support SAML or OpenID Connect
- Strong for modern cloud apps
- Central policy and Conditional Access
Gaps
- Apps that only take a username and password
- Windows desktop and legacy apps
- One-time codes still typed by people
Opt-in password managers
e.g. vaults people install and sign in to
Good at
- Stores and fills passwords for almost any web app
- Sharing between colleagues
- Familiar to many users
Gaps
- Only protects the people who sign up
- A master password to remember, and to phish
- Audit only covers people who enrolled
My1Login
Single sign-on and an enterprise password manager in one
What you get
- Every app: SAML, OIDC, password-only, desktop, one-time codes
- Everyone covered from day one, with Zero Login
- Passwords people never see, so can't be phished
- One policy and one audit trail for all of it
Feature by feature.
Types of tool, not named products: individual products vary, so check the detail with any vendor you're considering, including us.
| Feature | Cloud SSO platforms | Opt-in password managers | My1Login |
|---|---|---|---|
| Apps covered | |||
| Cloud apps with SAML or OpenID Connect | Yes | Fills the sign-in form | Yes |
| Web apps with only a username and password | Usually not | Yes | Yes, filled in for people |
| Windows desktop, Citrix and mainframe apps | Usually not | Often not | Yes, no API needed |
| One-time codes | Typed by the user | Some support | Generated and filled in |
| Apps nobody told IT about (shadow IT) | Only apps added to the gallery | Not reported centrally | Found, and added in one click |
| Apps asking people for one-time codes | Only apps set up for SSO | Not reported centrally | Found and reported, for compliance audits |
| Adoption | |||
| Who is protected | Everyone, on SSO apps only | People who sign up | Everyone, from day one |
| What people have to do | Sign in to the directory | Install, enrol, create a master password | Sign in to the directory, as now |
| Signing in to an app | One sign-in for SSO apps | Filled in, then people click to submit | Filled in and submitted, no extra clicks |
| New starters | Covered when their account is created | Covered once they enrol | Covered when their account is created |
| Security | |||
| Who can read stored passwords | Usually doesn't store app passwords | Each user, with their master password | Nobody outside your network, including us |
| Passwords hidden from people | Not applicable | People see and copy them | Yes, so they can't be phished |
| Long, random passwords changed by policy | Not applicable | If each person does it | Yes, per app |
| Shared accounts without sharing passwords | No | Shared, but visible | Yes, IT to people and between colleagues |
| One-time codes shared with a team | Each person uses their own device | Often not possible | Generated and filled in for everyone allowed |
| "Show password" on sign-in pages | Not applicable | People can reveal and copy it | Blocked, so it stays hidden |
| Control and audit | |||
| Audit trail | SSO apps only | Enrolled users only | Every access, every app |
| Leavers | SSO apps removed | Personal vault may keep access | Every app removed at once |
| Works with Entra ID and Active Directory | Is, or connects to, the directory | Varies | Yes: Entra stays your directory |
YesPartly, or it dependsNo, or usually not
Keep it. My1Login covers the rest.
Entra ID stays your directory and your identity provider. With Zero Login, people sign in to Entra ID or Active Directory as they do now, and that signs them in to My1Login too. My1Login then reaches the apps Entra ID can't, and can handle SAML and OpenID Connect apps itself if you prefer.
How single sign-on works with Microsoft Entra IDEntra ID does
- Your directory: users, groups and devices
- Conditional Access and MFA at sign-in
- Single sign-on for SAML and OpenID Connect apps
My1Login adds
- Apps that only take a username and password
- Windows desktop, Citrix and mainframe apps
- One-time codes, generated and filled in
- Passwords people never see, changed by policy
- Shadow IT: the apps nobody told IT about
A tool people don't use saves nothing.
An opt-in password manager only protects the people who choose to use it, and only on the apps it can reach. My1Login covers everyone from day one, which is why we can guarantee adoption. See what that's worth to your organisation.
~600 business apps found, and every one of them integrated
"My1Login has helped us identify around 600 business applications in-use and 100% of these are now integrated with My1Login's IAM solution…"
Callum McLean, Head of Innovation & Data, Natural Power · Read the Natural Power storyMore detail for your shortlist.
Comparison questions
Does My1Login replace our identity provider?
No. My1Login works alongside Microsoft Entra ID, Active Directory or Google Workspace, which stay your directory. Zero Login signs people in to My1Login when they sign in to the directory, and My1Login extends single sign-on to the apps your identity provider can't reach. It can also handle SAML and OpenID Connect apps itself if you prefer.
Do we still need a separate password manager?
Usually not. My1Login includes an enterprise password manager, so passwords for apps without single sign-on are created, filled in and changed for people, and can be shared without anyone seeing them.
We already have a password manager. Why change?
Because it only protects the people who use it. If some of your workforce never enrolled, their passwords are the ones most likely to be reused and phished. My1Login covers everyone from day one, with nothing to install or sign up to.
Can we move our passwords across from another tool?
Yes. My1Login can import your data from other solutions.
Is My1Login only for large organisations?
No. Customers range from single offices to organisations with more than 10,000 users. Single sign-on for desktop has a minimum of 100 users; the other modules have no minimum.
Can we compare it on our own apps?
Yes. Book a 5-minute demo and we'll show My1Login on the apps your workforce uses, or start a 14-day free trial.
Compare it on your own apps.
A specialist will show you My1Login signing in to the apps your other tools miss, in 5 minutes.
- 5 minutes, on your own apps
- A specialist replies within one working day
- No obligation