LOCKED MSO ー シングルサインオンを実現 4+

LOCKED is a SaaS management tool consisting of two tools: "LOCKED DAS" and "LOCKED MSO".



・“LOCKED DAS” SaaS account creation, settings, and deletion can be performed automatically

・Achieve secure single sign-on to "LOCKED MSO" SaaS


[Features of LOCKED DAS (Directory Auto Sync)]

① Accounts are automatically set up in accordance with personnel announcements such as joining/retirement/transfer.

Monitor accounts such as IDs, nominations, affiliations, and positions held by HR SaaS such as Microsoft 365 and Google Workspace. If there is a change in personnel information, the settings of the SaaS account used by the user will be automatically changed. SaaS-specific items can also be set, greatly reducing operational burden such as adding organization information and inviting to folders/channels.


② Record the setting status in the inventory ledger (account/license)

Records the configuration status of all users and all SaaS. You can flexibly search for users by various items such as department/position/base/company name/employment status/start/retirement date, etc., and understand the account holding status. From an auditing perspective, inventory, which should be carried out regularly, can now be easily and error-free.


③Analyze usage logs (requires coordination with LOCKED MSO)

Logs login status to SaaS for each user. By recording devices used, regions, etc., it is possible to strengthen controls and promote usage in a wide range of ways. Results can be viewed in easy-to-understand reports.


[Features of LOCKED MSO (Managed SSO)]

① We have a track record of collaboration not only with SAML but also with proprietary systems and on-premises systems.

It supports SAML authentication provided by general SaaS products for single sign-on, as well as authentication methods using browser extensions and smartphone secure browsers. We also have a track record of supporting on-premises environments.


②Flexible access control based on user/device, etc.

When implementing single sign-on to SaaS, you can combine various conditions such as user attributes (full-time or non-regular employees), access time and day of the week, IP address, and device approval status. This allows for flexible access control, including whether login is allowed or not.


③ Two-step authentication and biometric authentication can also be used

You can set up two-step authentication depending on the security of your location, such as remote work or access from outside. Additionally, when using the service from a smartphone, biometric authentication such as facial recognition and fingerprint recognition can be used to ensure safety while increasing user convenience.