Identity as a service that doesn't leave your older apps behind.
My1Login is an identity as a service provider with nothing to host, and it covers your whole estate: cloud and mobile apps, password-only apps, apps that ask for one-time codes, and Windows desktop software. The service is contracted at 99.9% availability and typically runs at 100%, and nobody outside your organization can read your data, including us.
- Nothing to host
- Cloud, desktop and legacy apps
- Zero-knowledge encryption
- Hosting
- Fully managed, nothing to install on servers
- Availability
- 99.9% SLA · typically 100%
- Directory
- Microsoft Entra ID · synced
- Encryption keys
- Inside your network only
- Apps covered
- Web, mobile and Windows desktop
Trusted by organizations including
Most IDaaS stops at the cloud. Your estate doesn't.
Identity as a service should cover every app your workforce uses, not only the ones built for it.
A typical IDaaS
- Cloud and SAML apps
- Older apps need another tool
- The provider holds your encryption keys
- Users have to adopt it
With My1Login
- Cloud, password-only and Windows desktop apps
- One service for all of them
- Keys stay inside your network
- 100% adoption, guaranteed
Identity as a service, up and running fast.
At Natural Power and ELEXON, the first user was up and running in less than an hour.
Connect your directory
My1Login works with Active Directory and Microsoft Entra ID; your workforce signs in as normal.
Add your apps
20,000+ apps in the catalog, any web app by its address, and Windows desktop apps with the desktop add-on.
Run it as a service
Nothing to host or patch. Policies, reports and the audit trail are in the admin console.
- 100%typical availability, with a 99.9% SLA
- <1 hourto the first user up and running at Natural Power and ELEXON
- 20,000+apps ready to connect
- Since 2007protecting organizations worldwide

"My1Login has helped us identify around 600 business applications in-use and 100% of these are now integrated with My1Login's IAM solution…"
Callum McLean, Head of Innovation & Data, Natural Power · Read the storyEverything you need from an IDaaS provider.
Everything below works across web, cloud and Windows desktop apps.
Zero Login
Signing in to the directory signs your workforce in to My1Login too. No extra password.
100% adoption, guaranteed
Nothing to install or enroll in, so every account in your directory is covered from day one.
Windows desktop apps
Single sign-on for Windows desktop and legacy software, with no API needed.
One-time codes, generated and filled
Authenticator codes generated and filled in, so nobody reaches for a phone.
Password policy per app
Strong passwords created and changed by policy, even on apps you don't control.
Step-up per app
Ask for an extra check before your most sensitive apps open.
A record of every access
Who opened which app, and when, across web, cloud and desktop.
Zero-knowledge encryption
The keys stay inside your network. Nobody outside it can read your stored passwords, including us.
The products behind it.
Each one shares the same directory connection, policies and audit trail.
- Single sign-on for webOne sign-in for web, cloud and mobile apps.Learn more →
- Enterprise password managerPasswords filled automatically, never seen by your workforce.Learn more →
- Add-onMFA and one-time codesSecond factors and codes filled in for every app.Learn more →
- App catalog20,000+ apps ready to connect.Learn more →
Identity as a service questions
Is there anything to host?
No. My1Login is a managed service. A lightweight agent on Windows devices handles desktop sign-in where you use the desktop add-on, deployed through Group Policy or Intune.
Can My1Login see our passwords?
No. With zero-knowledge encryption the keys are only available inside your organization's network, so nobody outside it can read your stored passwords, including My1Login.
Does it replace Microsoft Entra ID or Active Directory?
No. Your directory stays as it is. Signing in to it signs your workforce in to My1Login, which extends single sign-on to the apps your directory can't reach: password-only apps, apps that ask for one-time codes, and Windows desktop software.
What does the adoption guarantee cover?
Adoption is guaranteed wherever the zero-login configuration has been deployed. Every provisioned user who signs in to your corporate directory, such as Microsoft Entra ID or Active Directory, during the contract term counts as adopted.
How much does it cost?
Prices are per user, per month, on an annual contract. See the pricing page for every module.
Bring your most awkward app to a 5-minute demo.
We'll sign in to it without a password, and show you what IT controls and what your workforce notices, which is nothing.
- 5 minutes, on your own apps
- A specialist replies within one working day
- No obligation




