OneLogin Desktop
Move toward a passwordless work environmentand optimize your IT cloud infrastructure

Active Directory (AD) worked well in the past, when
everyone used their personal workstations in theoffice and behind the firewall. IT could configure
password policies in AD and have them enforced
across an entire fleet of PCs. But that scenario
has changed.
Today’s modern organizations increasingly consistof employees, contractors, and remote workers
with a variety of devices in many locations. A more
distributed workforce means reduced reliance on
the corporate network. As a result, a large portionof worker laptops never join an AD Domain. And,often, companies born in the cloud don’t evenhave AD. Either scenario can mean stale or weakpasswords for devices. In fact, More than 80
percent of breaches within hacking involve brute
force or the use of lost or stolen credentials.1 IT
teams, therefore, must find ways to eliminate therisks that come with unmanaged laptops andunsecured passwords.

The One Identity OneLogin Desktop
OneLogin Desktop enables organizations
to seamlessly move towards a passwordlessenvironment and provide simple and secure single
sign-on to applications accessed through theOneLogin portal on both PCs and Macs. It binds
PCs and Macs to the cloud directory, ensuring users
always authenticate against a live directory, nomatter where they are located.

1 Verizon Data Breach Investigation Report, 2022

Key Benefits• A cloud directory for all apps – Companies
that operate in the cloud have AD on
the wrong side of the firewall. OneLogin
Desktop authenticates laptops against theunified cloud directory using modern APIs.
• Improved SSO experience – Once auser signs into their laptop, they areautomatically signed into OneLogin. No
need to sign in twice. And fewer passwords
to remember means fewer (or no) mistakes.
• Reduced TCO – With OneLogin Desktop,
you don’t need to purchase AD licenses forevery device. Save money on AD licenses
so you can spend it on other priorities.
• Limit access to untrusted devices –Using PKI certificates, access to theportal is restricted to only devices thathave OneLogin Desktop installed andare sanctioned by the IT department.
• Greater visibility, control andmanagement – Easily run the reports
you need on device inventory andOneLogin Desktop events to fulfill security
compliance and auditing requirements.
• Enhanced multi-user experience – Forlocations where multiple workers sharethe same machine, OneLogin Desktop
can operate as a kiosk that allows
different users to securely sign into their
OneLogin portal from the same device.

What is OneLogin Dektop?

Passwordfree accessto your apps

Device-level
access fromsign in screen

OneLogin Desktop

OneLogin Desktop Pro

Login to your OneLogin portal
without entering your credentials

Adds login to your Mac or Windows
computer using your OneLogin credentials

KEY CAPABILITIESOneLogin
Desktop

OneLogin
Desktop Pro

Strong authentication with OneLogin Desktop Certificate
OneLogin Desktop issues a unique certificate to each PC or Mac for strong
authentication, which can be revoked by admins in case of a lost device.
MDM deployment support
Admins can securely deploy OneLogin Desktop to groups of PCs and Macs with
3rd party solutions, such as Airwatch, JAMF, Meraki, etc.
Simple for IT to manage
Easy device and security policy management, all in one place. Users receiveautomated password expiration notices, enabling self-service password reset.
Shared workstation / kiosk mode
Support multiple users for one machine to eliminate password sharing. When a user
signs in to the Tray App, it binds the profile to that user with a specific certificate.
Device authentication
To reduce security fatigue, users can sign into their PC or Mac with their
OneLogin password at boot time and on the lock screen.

Over 2,500 enterprise customers globally secure their applications with OneLogin2