Skip to content
ControlIT

ControlIT Identity: Single Sign-On and MFA on Your Directory

ControlIT Identity puts single sign-on and MFA on the Active Directory you already run, with access by group and an audit trail of every sign-in and change.

What signing in looks like

Illustrative ControlIT Identity sign-in: a remote laptop logs on to the domain through the encrypted overlay, confirms a time-based one-time password, and single sign-on opens internal apps, while an audit log records each step. Sample data only.

What this actually does

One sign-on and MFA for every app, on the directory you already run.

  • SSO and MFA: single sign-on over OpenID Connect, OAuth 2.0 and SAML 2.0, with time-based one-time passwords.
  • Identity and Access Management: access by group, so a role change updates what a person can open, with an audit trail.

The directory underneath.

Identity signs people in to their apps. ControlIT AD Anywhere keeps the Active Directory underneath it reachable over the internet: domain logon, Group Policy and remote domain join, with no Entra ID and no connector.

What changes as a result

  • One identity across every business application
  • Fewer passwords and fewer service-desk resets
  • Access granted and revoked from one admin console
  • A full audit trail of authentications and approvals
  • Predictable cost, with no per-user identity fees

Scope an Identity rollout

Bring us your directory, your remote access and your sites. We will map what the overlay changes before anyone signs anything.