Strong identity and
access management
MyDesk uses Microsoft Entra ID as central identity and access management with SSO, MFA and role-based access according to the least privilege principle.
Single Sign-On via Microsoft Entra ID
MyDesk supports Single Sign-On (SSO) via Microsoft Entra ID (formerly Azure Active Directory). Customers can integrate MyDesk directly with their existing identity provider, so users log in with their corporate identity.
The SSO integration supports SAML 2.0 and OpenID Connect and can be configured to enforce customer-specific access policies, including MFA and conditional access.
Multi-Factor Authentication (MFA)
MFA can be enforced via customer Entra ID policies. MyDesk supports passwordless authentication and modern authentication methods such as FIDO2 and Microsoft Authenticator.
Role-based access and least privilege
Access to the MyDesk platform is granted according to the least privilege principle. Internal employees only have access to the systems and data necessary for their work. Access is granted formally and reviewed regularly.
- No shared user accounts - individual accounts for all users
- Role-based access control (RBAC)
- Privileged Access Management (PAM) for administrative accounts
- Automatic deprovisioning upon resignation
- Regular access review
- Audit log of all administrative changes
Internal access management
MyDesk internal employees authenticate via Microsoft Entra ID with MFA as a requirement. Privileged accounts are subject to additional controls, including just-in-time access and authentication workflows.
IAM overview
- SSO via Microsoft Entra ID
- MFA - Enforced via Entra ID
- Passwordless authentication
- RBAC - Least privilege
- No shared accounts
- Automatic deprovisioning
- PAM for privileged accounts
Identity and access in each layer
SSO & MFA
Single Sign-On and Multi-Factor Authentication via Microsoft Entra ID.
Least Privilege
Access is granted only to what is necessary - no excessive rights.
Audit & Control
All access changes are logged and reviewed regularly.
Do you have any questions?
Contact our Security Team directly - we answer security, compliance and documentation questions quickly and accurately.
