Optimal Federation & Identity Services (OFIS) is an on-premise federated identity management system that provides seamless and secure access to thousands of applications using Single Sign-On (SSO) technology. Integrated with Optimal IdM’s Virtual Identity Server (VIS), OFIS supports multi-factor authentication and authorization from any data store, including LDAP, Active Directory, and databases. It enables organizations to manage user identities and entitlements across hybrid environments, offering a robust alternative or complement to ADFS.

Features

• Single Sign-On (SSO): Seamless access to cloud and on-premise applications.
• Multi-Factor Authentication (MFA): Supports Radius, Telesign, PhoneFactor, CAC, and client certificates.
• Entitlements Framework: Built-in claims-based authorization with approval workflows.
• Directory Integration: Authenticates from any data store—LDAP, AD, or databases.
• Federation Protocols: Supports SAML 2.0, WS-Federation, ADFS 2.0–3.0.
• Audit & Compliance: Logs all activity with out-of-the-box reports and SQL Server integration.
• User Management: Delegated administration, self-service registration, and identity hosting for partners/customers.
• Flexible Deployment: Available on-premise, in the cloud, or hybrid.
• Application Compatibility: Works with Salesforce, Office 365, Concur, and more.
• Custom Claims: Fine-grained access control down to document-level permissions.

Benefits

• Eliminate Deployment Barriers: No need for forest trusts or schema extensions; deploy across multiple AD forests.
• Reduced IT Costs: Leverages existing Microsoft infrastructure and reduces support overhead.
• Audit Readiness: Tracks authentications, changes, and access with detailed reporting.
• Rapid Deployment: White-glove service enables setup in days, not months.
• High Availability: Real-time sync and geo-redundant cloud options ensure uptime.
• Scalable Identity Hosting: Manage external identities without maintaining on-premise directories.
• Customizable Access Control: Entitlements and claims provide granular control over application access.