Secure Salesforce Login

Secure access for Salesforce with ease of use

Businesses are using Salesforce as a mission critical CRM system. They want to protect the access to their data, assets and expertise in Salesforce and use one service for all identification and authentication requirements in their CRM processes for both – the online and mobile channel.

Businesses, however, are not safe from hackers if their systems and networks are accessible through user-managed passwords only. The current use of tokens and one-time passwords is safer, but businesses are finding this solution increasingly outdated in terms of usability, flexibility, cost and even security. Staff and business partners are engaged in constant, vital communication accessing systems behind the firewall or in the cloud – they must have a superior access solution that meets today’s needs. accells for Salesforce addresses the lack of security of relying solely on user-managed passwords to access Salesforce and addresses the key challenges of token/one-time-password based solutions.

accells Mobile ID service for Salesforce enables businesses to

• deploy smart multi-factor authentication via a smartphone app, creating a stunningly simple, adaptive usability that enhances security while eliminating the need for tokens and one-time passwords
• enjoy accells as a smart single signon for other enterprise or consumer cloud services – in the office or on the go – reducing the complexity of additional systems and user-managed passwords
• leverage accells as one identification service for any other Salesforce workflow such as approvals
• determine authentication rules based on location, device or time context allowing businesses to both strengthen and relax authentication requirements
• to flexibly connect their own internal user directory or the cloud-based accells user directory being in full control which and when users should use accells for Salesforce

Benefits

The perfect combination of ease of use, high security and low total cost of ownership

• Stunning user experience – works in seconds w/o token and OTPs
• Initial setup of accells Mobile ID – works in a few hours
• Activation of Salesforce – works with a few clicks via SAML
• Activation of new services – works within days
• User rollout via app stores – downloadable within seconds
• User Directory Integration – in full control of user go live
• Multi-layered Security – protection of CRM data
• Mobile end-to-end Security – protection against phishing and trojans
• Total Cost of ownership – at 60% of token solutions

Multi-factor authentication with adaptive usability

accells authentication is adaptive to balance ease-of use and security taking various factors for authentication into account (where-you-are, what-you-have, what-you-know, what-you-are, what-youdo). By defining their own authentication policies, businesses can enforce strong authentication by asking for a password on the accells smartphone app, e.g.: When a user wants to access Salesforce for the first time during the day; from an unknown device; or from a location abroad. At the same time, authentication can be eased just by requesting a simple confirmation via the accells app when the user accesses Salesforce from a work PC or home location. Businesses can even ensure security for mobile-only access – protecting access and transactions against phishing and trojans.

Smart SSO and workflow approvals

Being one point of authentication for all employee services, accells can be leveraged far beyond strong authentication. Businesses can use accells as a smart single sign-on (SSO). Salesforce can be extended to any other SAML-enabled cloud and VPN service used by the enterprise. For example, businesses can enforce strong authentication by asking for a password via the accells app when a user accesses the first enterprise service in the morning from his work PC. They can ease authentication – even enabling a silent authentication – for any other service access from the user´s work PC during the day. This enables a truly smart single sign-on, balancing security and ease-of-use. Leveraging the accells API, accells can even be integrated into Salesforce to support any identification, approval, payment or document sharing workflows.

Multi-user, multi-account access

Businesses can set up user access privileges in a way that allows several users to get access to the same Salesforce account (e.g. the Sales Director and his assistant) and a single user to access several Salesforce accounts (e.g. a Sales assistant can get access to the account of several Sales Managers).

This can now be done in a secure way without informally sharing access credentials and thereby losing any audit trail.

In full control when users go-live

accells is entirely cloud-based – there is no need to install software, integrate appliances or change firewalls. Administrators set up accells for Salesforce within minutes using the standards-based SAML protocol (using trusted digital signatures between accells and Salesforce). Enabling SAML, businesses close the “front-door login page” to Salesforce as a main attack gate and enable their own private login page. Via accells, they decide at any time which users are enabled for accells and which can still access Salesforce using just username and password. This enables a sensitive step-by-step migration and does not force the business to migrate all users to accells. For users without smartphones, businesses can enable SMS OTP or wait until they have a smartphone available.

Connect your user directory

Businesses have the option to enable accells authentication connecting to their own internal user directory (e.g. Active Directory, LDAP) or the cloud-based accells user directory. Connecting their own internal user directory gives businesses full control of security, identity and access. First-time user provisioning is supported by a file upload. AD synchronization will be supported. AD integration can be configured in high availability mode with multiple connections per domain controller. By leveraging the accells user directory, businesses can rely on state-ofthe- art security measures to protect the users’ data, such as SSL-256 in-transit encryption, AES-256 at-rest encryption, password salting and hashing as well as key management per organization across systems.

Security & Availability

accells supports complex directory infrastructures. They offer peace of mind with redundant data centers, redundant DNS, DDoS protection, periodic security reviews, and 24/7 monitoring. 99.9% Uptime Guarantee.