Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Confidant is an open-source service designed for secret management, enabling secure and user-friendly storage and retrieval of sensitive information, developed by the team at Lyft. It addresses the challenge of authentication by leveraging AWS KMS and IAM, which enables IAM roles to create secure tokens that Confidant can validate. Additionally, Confidant oversees KMS grants for your IAM roles, facilitating the generation of tokens for service-to-service authentication and enabling encrypted communication between services. Secrets are stored in an append-only format within DynamoDB, with each revision of a secret linked to a distinct KMS data key, utilizing Fernet symmetric authenticated encryption for security. Furthermore, Confidant features a web interface built with AngularJS, allowing users to efficiently manage their secrets, associate them with services, and track the history of modifications. This comprehensive tool not only enhances security but also simplifies the management of sensitive data across various applications.

Description

The OTP authentication module for Microsoft ADFS, compatible with both ADFS 2019 and ADFS 2016 servers, facilitates multi-factor authentication (MFA) through a Time-Based One-Time Password (TOTP) mechanism, adhering to RFC6238 standards. This MFA solution mandates that users input a one-time passcode generated by authenticator applications like Microsoft Authenticator, Google Authenticator, or Symantec VIP to finalize their second factor authentication during the login process. Additionally, it allows for self-registration via QR codes using free mobile apps, while securely storing OTP data in Microsoft Active Directory attributes or MS SQL Server. Encryption of QR secrets is implemented using AES 256-bit technology, enhancing security further. The configuration also includes specifying network locations (both IPv4 and IPv6) from which users can scan the QR code, and it supports trust relationships across multiple ADDS forests, making it a highly versatile security solution. With these features, organizations can effectively bolster their security protocols and ensure a robust authentication process.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Amazon Web Services (AWS)
AWS Amplify
Active Directory
Amazon DynamoDB
Amazon Simple Notification Service (SNS)
Azure API Management
Google Authenticator
IAM Cloud
Microsoft 365
Microsoft Authenticator
SQL Server
Symantec VIP

Integrations

Amazon Web Services (AWS)
AWS Amplify
Active Directory
Amazon DynamoDB
Amazon Simple Notification Service (SNS)
Azure API Management
Google Authenticator
IAM Cloud
Microsoft 365
Microsoft Authenticator
SQL Server
Symantec VIP

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

$178.25 per year
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Confidant

Founded

2014

Website

lyft.github.io/confidant/

Vendor Details

Company Name

SecureMFA

Country

United States

Website

www.securemfa.com/home

Product Features

Privileged Access Management

Application Access Control
Behavioral Analytics
Credential Management
Endpoint Management
For MSPs
Granular Access Controls
Least Privilege
Multifactor Authentication
Password Management
Policy Management
Remote Access Management
Threat Intelligence
User Activity Monitoring

Product Features

Self-Service Password Reset (SSPR)

Access Control
Alerts / Notifications
Application Security
Compliance Management
Credential Management
Employee Directory
Group Passwords
Password Database
Password Management
Reminders
Reporting / Analytics
Single Sign On
Two-Factor Authentication (2FA)

Alternatives

Alternatives

OptimalMFA Reviews

OptimalMFA

Optimal IdM
Symantec VIP Reviews

Symantec VIP

Broadcom
Knox Reviews

Knox

Pinterest
It'sMe Reviews

It'sMe

Acceptto