Secure every system you run, from the twenty-year-old ones to the cloud.
Councils, government bodies, schools and charities rely on hundreds of systems, many of them Windows desktop software that no single sign-on reaches. My1Login brings all of them under one sign-in and one audit trail.
- Legacy and in-house apps, no API needed
- Evidence for CAF and Cyber Essentials
- G-Cloud supplier, frameworks 8 to 13
| App | Type | Status |
|---|---|---|
| Revenues and benefits | Windows desktop | Single sign-on |
| Housing management | In-house · no API | Single sign-on |
| Microsoft 365 | SAML | Single sign-on |
| Planning portal | Web · password | Single sign-on |
| Survey tool | Found by discovery | Unmanaged |
Trusted across the public and third sectors, including
More systems, tighter budgets and assurance to evidence.
Public services depend on a long tail of systems, from case management to old line-of-business software, run by IT teams that are rarely growing. Every forgotten password costs time; every reused one is a risk.
Hundreds of systems, many of them old
Revenues, housing, social care and in-house applications often run on the Windows desktop with no modern sign-in.
What it leads to: a password for every system, and single sign-on that stops halfway.
Budgets that don't stretch
Password resets and account admin take service desk time that could go elsewhere, and unused licenses are hard to spot.
What it leads to: money spent on admin rather than services.
Assurance you have to evidence
Frameworks such as CAF and Cyber Essentials ask who can access what, how they authenticate, and when access is removed.
What it leads to: spreadsheets and manual checks at assessment time.
One sign-in and one record, for every system you run.
My1Login works with the directory you already have and covers the systems other tools can't.
Connect your directory
Your workforce signs in to the directory as normal, and that signs them in to My1Login. There's nothing new to learn.
Cover every system
Cloud, on-premise, Windows desktop, bespoke and virtualized applications, with single sign-on and no API required.
Evidence on request
Reports on who accessed which system and when, plus license use, ready for an assessment or an audit.
Turning Point Scotland protects access across social care.
"We chose My1Login because their technology easily integrated with our corporate directory and all of our applications – also their zero-knowledge encryption gave me confidence that even My1Login themselves could not access our data."
- 6G-Cloud frameworks in a row, G-Cloud 8 to 13
- Since 2007protecting organizations worldwide
Evidence for the frameworks you are assessed against.
Public bodies are increasingly asked to prove, not just state, how access to systems and data is controlled.
| Framework | What it expects of access | How My1Login helps |
|---|---|---|
| Cyber Assessment Framework (CAF) and GovAssure | Objective B2 expects identity and access control: verified users, appropriate privileges and access removed when no longer needed. | Access from your directory, unique strong passwords, MFA per system, leavers removed everywhere at once, and an audit trail of every access. |
| Cyber Essentials and Cyber Essentials Plus | User access control: accounts only for those who need them, strong passwords or MFA, and admin rights kept separate. | Strong, unique, hidden passwords and MFA on the apps that need it. Password policies enforced on every account. |
| UK GDPR | Appropriate technical measures to protect personal data, including access control and the ability to show it. | Zero-knowledge encryption, so nobody outside your organization can read stored credentials, including My1Login. |
| ISO/IEC 27001 (yours) | Controls over who can access what, how they authenticate, and a record of access. | Governance of access to every system and a full audit trail, as evidence for your own certification. |
Built for public service IT.
Everything below works across web, cloud and Windows desktop systems.
Legacy and in-house apps
Single sign-on for Windows desktop and bespoke applications, with no API required.
Shared accounts, safely
Teams share access to shared mailboxes and service accounts without sharing passwords.
Joiners, movers and leavers
Access follows your directory, so people get the right systems on day one and lose them on their last.
One-time codes, generated and filled
Systems that ask for an authenticator code get it generated and filled in automatically.
Shadow IT found
Apps your workforce signs up to without telling IT are spotted and brought under the same rules.
License and access reports
See who uses which systems, to spot unused licenses and answer audit questions.
Zero-knowledge encryption
The keys stay inside your network. Nobody outside it can read your stored credentials, including us.
Public sector buying routes
My1Login was a supplier on G-Cloud 8 to 13. If you need to buy through a public sector framework, talk to us about the routes available.
Public sector questions
Can we buy My1Login through G-Cloud?
My1Login was a supplier on G-Cloud 8 to 13. If you need to buy through a public sector framework, talk to us about the routes available.
Does it work with our older Windows applications?
Yes. My1Login provides single sign-on for Windows desktop, bespoke and virtualized applications, with no API required.
Does it replace our directory?
No. It works with the directory you already have, such as Active Directory or Microsoft Entra ID, and extends sign-in to the systems it can't reach.
Does it help with schools and universities?
Yes. The same single sign-on covers school, college and university systems, for teachers, lecturers, support teams and students alike.
Can My1Login see our data?
No. With zero-knowledge encryption the keys stay inside your network, so nobody outside it can read your stored credentials, including My1Login.
Bring your oldest system to a 5-minute demo.
We'll sign in to it without a password and show you the audit record your assessor will ask for.
- 5 minutes, on your own apps
- A specialist replies within one working day
- No obligation