Book a demo
Single sign-on provider

The SSO provider that covers every app, not just the cloud ones.

Most single sign-on stops at apps that support SAML. My1Login signs your workforce in to those, and to everything else: apps that only take a username and password, apps that ask for one-time codes, and Windows desktop software. One sign-in, one policy, one audit trail.

Book a 5-minute demoHow it works
  • SAML, OIDC and password-only apps
  • Windows desktop software, no API needed
  • From £1.50 per user per month
What your workforce seesEvery app open, already signed in.

Trusted by organisations including

  • Mainspring logo
  • Natural Power logo
  • ELEXON logo
  • Azets
  • NHS 111
  • Michelin

Single sign-on that stops halfway still leaves you with passwords.

Cloud SSO platforms are excellent for the apps that support them. The rest of your estate is where the passwords, and the risk, still live.

A typical cloud SSO

  • Apps that support SAML or OIDC only
  • Password-only apps left to users
  • One-time codes typed by the user
  • Windows desktop apps not covered
  • Audit for SSO apps only

With My1Login

  • SAML, OIDC and password-only apps
  • Passwords created, hidden and filled in
  • One-time codes generated and filled in
  • Windows desktop, Citrix and mainframe apps (add-on)
  • One audit trail for every app
How it works

One sign-in, from the directory to every app.

My1Login works with the directory you already have and covers the apps it can't reach.

  1. Connect your directory

    Your workforce signs in to Active Directory or Microsoft Entra ID as normal, and that signs them in to My1Login.

  2. Add your apps

    Pick from 20,000+ apps in the catalogue, add any web app by its address, or one-click add apps found by discovery.

  3. Sign in everywhere

    SAML and OIDC apps by token; everything else with passwords filled in and one-time codes generated and filled in.

  4. See every access

    One audit trail for every app, ready for reviews, audits and investigations.

  • 10,000+users rolled out at once at MainspringRead the story
  • ~600apps found and integrated at Natural PowerRead the story
  • 100%adoption, guaranteed
  • Since 2007protecting organisations worldwide
Mainspring logo
"One of the easiest technology implementations we've ever had to do."
Neil Clark, Chief Operating Officer, Mainspring · Read the story
Built in

Everything a single sign-on provider should do.

Everything below works across web, cloud and Windows desktop apps.

  • Windows desktop apps

    Single sign-on for Windows desktop and legacy software, with no API needed.

  • One-time codes, generated and filled

    Authenticator codes generated and filled in, so nobody reaches for a phone.

  • Passwords nobody sees

    Nothing for a phishing page to collect, and nothing for a leaver to take away.

  • Shared accounts

    Use a shared login without seeing its password, with every use logged.

  • Step-up per app

    Ask for an extra check before your most sensitive apps open.

  • Shadow IT found

    Sign-ins to apps IT didn't know about are spotted and brought under the same rules.

  • Mobile apps too

    The My1Login app for iOS and Android brings the same sign-in to phones and tablets.

  • Zero-knowledge encryption

    The keys stay inside your network. Nobody outside it can read your stored passwords, including us.

The products behind it.

Each one shares the same directory connection, policies and audit trail.

Further reading

Choosing a single sign-on provider

SSO provider questions

How much does single sign-on cost?

Single sign-on for web is from £1.50 per user, per month, for SAML apps, and £2 including apps that sign in with a username and password. Single sign-on for desktop is a £2 add-on. Prices are for an annual contract.

Which apps does it work with?

SAML and OpenID Connect apps, web apps that only take a username and password, apps that ask for one-time codes, and, with the desktop add-on, Windows desktop, Citrix and mainframe software. There are 20,000+ apps in the catalogue.

Does it replace Microsoft Entra ID or Active Directory?

No. Your directory stays as it is. Signing in to it signs your workforce in to My1Login, which extends single sign-on to the apps your directory can't reach: password-only apps, apps that ask for one-time codes, and Windows desktop software.

Can My1Login see our passwords?

No. With zero-knowledge encryption the keys are only available inside your organisation's network, so nobody outside it can read your stored passwords, including My1Login.

What does the adoption guarantee cover?

Adoption is guaranteed wherever the zero-login configuration has been deployed. Every provisioned user who signs in to your corporate directory, such as Microsoft Entra ID or Active Directory, during the contract term counts as adopted.

Bring the app your SSO can't reach to a 5-minute demo.

We'll sign in to it without a password, alongside your SAML apps, and show you one audit trail for both.

  • 5 minutes, on your own apps
  • A specialist replies within one working day
  • No obligation
Book a 5-minute demoStart a 14-day free trialThe full product, on your own apps.
Book a 5-minute demoFree trial