MFA & SSO
TOTP and WebAuthn MFA, plus SAML/OIDC SSO for the whole tenant.
Identity is the perimeter. MFA on every account and SSO across the workforce are non-negotiable controls. CloudIP enforces MFA at the tenant level with TOTP and WebAuthn, and federates with any SAML or OIDC identity provider for SSO.
SMS MFA is intentionally not supported because of well-known SIM-swap risk.
Inside MFA & SSO
Specifics that distinguish CloudIP MFA & SSO from the alternative.
TOTP and WebAuthn
Authenticator-app and hardware-key MFA enforced tenant-wide.
SAML SSO
Federate with Okta, Azure AD, JumpCloud, and other SAML providers.
OIDC SSO
OIDC for Google Workspace, Microsoft 365, and custom IdPs.
Session policies
Per-role session length, idle timeout, and re-auth requirements.
MFA & SSO on the CloudIP platform
Where this capability lives, who runs it, and what it shares with the rest of the system.
MFA & SSO runs as part of the CloudIP Cybersecurity module on the same multi-tenant infrastructure as every other capability you use. There is no separate console to log into and no separate billing line: SMB MFA and SSO is provisioned the moment your tenant is created and stays in lockstep with the rest of the platform as it grows.
Operators interact with SMB MFA and SSO through the Cybersecurity interface they already know — the same record screens, the same audit trail, the same role and permission model. Behind the scenes, totp and webauthn handles the heavy lifting, while session policies keep the experience consistent across teams. Configuration changes are versioned, exportable, and reviewable, so the way you run SMB MFA and SSO today is reproducible tomorrow.
Because MFA & SSO reuses the platform's user database, every action is attributable, every record has a stable ID, and every export honours the tenant's data residency choice. That means SMB MFA and SSO reports tie out to the rest of the books, audit logs, and operational dashboards without an integration step in between.
MFA & SSO fits inside CloudIP Cybersecurity alongside the other cybersecurity capabilities — they share the same data model, so improvements in one tend to compound across the others. If you are evaluating CloudIP specifically for SMB MFA and SSO, the rest of Cybersecurity comes along at no extra cost.
Common questions about MFA & SSO
TOTP authenticator apps, WebAuthn (security keys, platform authenticators like Touch ID and Windows Hello), and push notifications via the mobile app. SMS is supported but discouraged for high-privilege roles per NIST guidance.
More from Cybersecurity
Modern AV/EDR for Windows, macOS, and Linux endpoints.
Behavioral detection, isolation, and rollback through the backup module.
Tenant-wide change history exportable for SOC 2 and HIPAA reviews.
Pre-built evidence packs for HIPAA, SOC 2, and PCI controls.
Playbooks, isolation, and forensic timelines after detection.
Alerts when employee credentials or domains appear in breach data.
Try Cybersecurity free for 14 days
See MFA & SSO alongside the rest of the platform on real data.