HomeEnterprise GuideUser Guides
Search…
Keeper SSO Connect™ Cloud
Overview
Admin Console Configuration
SSO Identity Providers
Device Approvals
Logout Configuration
User Provisioning
System Architecture
Security and User Flow
Migration from On-Prem
Links & Resources
Powered By GitBook
Overview
High level overview of Keeper SSO Connect™ Cloud

End-to-End Password Protection Across Your Data Environment

Simply by authenticating through your existing IdP, your employees gain access to all of the capabilities of the top-rated Keeper password management platform, including:
    Secure digital vault that can be accessed from any device, running any OS
    Automatic password generation & autofill on all devices
    Compatibility on any system, browser or app
    Zero-knowledge encryption of vault data
This service does not require any on-premises or customer cloud-hosted services and there are no Master Passwords. Configuration is done directly between the IdP and Keeper's Admin Console.
To preserve Zero Knowledge, an Elliptic Curve public/private key pair is generated for each device. The private key on the device encrypts and decrypts the user's vault. Signing into a new device requires a key exchange that is processed by our Keeper Push feature or approved by a designated Admin. Automated admin approvals can be configured in several different ways.

Setup Steps

Keeper SSO Connect Cloud can be rolled out in 3 easy steps:
    1.
    Create a SSO Connect Cloud instance on the Keeper Admin Console
    2.
    Exchange metadata with your SAML identity provider
    3.
    Set up Automated provisioning, or manually provision users to Keeper

Device Approvals

An Administrative Permission called "Approve Devices" allows an Administrator to perform device approvals. Admin Approvals can also be automated. See the Device Approval section for details.

Benefits

From an administrator's perspective, the cost, risk & labor saving benefits of Keeper SSO Connect Cloud are significant:
    Easy setup, all in one place in Keeper’s existing Admin Console.
    No hosted software to integrate with the IdP
    No additional server costs
    No patching software
    Eliminates a potential single point of failure
    Available 24/7/365 on Keeper’s high availability systems
Previous
Keeper SSO Connect™ Cloud
Next
Admin Console Configuration
Last modified 3mo ago
Export as PDF
Copy link
Contents
End-to-End Password Protection Across Your Data Environment
Setup Steps
Device Approvals
Benefits