Onegini Identity Cloud platform update August 2020

Author: Denis Joannides

Last updated: October 16, 2020

At Onegini we are proud to be backed by a brilliant team of developers who live and breathe code. More than 50 developers optimize Onegini Identity Cloud every day. In this update we inform you about the latest new features, changes and improvements of our Customer Identity and Access Management platform Onegini Identity Cloud.


platform update 04

A branded 2 Factor Authentication (2FA) app for safe access towards Salesforce
Onegini recently has released a new product: A ready to use multi factor authentication (MFA) app, providing Salesforce users an Authenticator App in their own corporate look.
Stringent regulations and the growing pressure of data security compliances are driving the demand for multifactor authentication (MFA) market. Unlike other authenticators, this app can be branded to the corporate style of the Salesforce customers. Customers can download the apps instantly from the Apple Store and Google Play Store. The app is easy to set up and connect and additional authentication factors can be configured.

Cloud Monitoring Dashboard
A great new improvement within Onegini’s service offering is the cloud monitoring dashboard. Customers don't have to wait for the monthly report but can have real-time information and analysis of up- and downtime of their production environments. New features will be stacked on the cloud monitoring dashboard in the next months.

Support for Vecozo certificate
Vecozo is the national hub within the Netherlands for secure digital communication in the healthcare industry. The certificate is a digital key that gives you access to the secure areas of the VECOZO website. Onegini Identity Cloud fully supports Vecozo Single Sign-on (SSO), allowing health insurers and other health organizations to log in with the Vecozo certificate.

Support Azure AD for B2E
Onegini Identity Cloud unburdens employees who are accessing Portals through Onegini on a Windows computer. Employees will encounter a frictionless Single Sign On (SSO) customer experience when switching between portals within their own organization.

Optimization in configuring external identity providers via multi brand module
Onegini has released a new feature for organizations who use the Multi Brand module. With this module, Onegini Identity Cloud allows configuring multiple brands or labels. Each brand will have its own user-interface styling and identity store while the underlying registration and login processes remain identical. A new add-on on the multi brand module is that customers can now setup multiple external identity providers such as eHerkenning, eIDAS and DigiD per brand from one admin interface. Customers don’t need one server per brand anymore and it is more user friendly and faster to configure it from one admin portal.

SaaS import API for improved migration process
Helping customers to migrate from homegrown solutions or on-premise installations towards a modern customer identity and access management platform is what we do best. To further improve Onegini’s product offering in this matter, we now have an API to import user accounts from an on-premise Onegini solution to Onegini Identity Cloud. End-users can login with their current password and their account status is preserved. A migration from on-premise to SaaS does not have any user impact anymore.

Delegated Administration for Business Partners module
Business partners with access to your online services are allowed to manage their own users, with user access based on pre-determined policies. This will save you time and money as your business partners now won’t need to ask in case they need to add, update or delete users and their authorizations. The new Delegated Administration for Business Partners module is now multitenant and SaaS as well. In addition, Delegated Administration for Business Partners now can handle groups in groups with unlimited group level delegation. This is a great add-on for intermediaries who have to manage several local offices, local teams and local authorizations.

Customer Self Styling module
Self Styling enables front-end developers to create and upload company-specific templates, allowing for custom styling of any registration and login screen. By using Self Styling, a front-end developer will be able to create and upload a template with the company logo and company-specific colours to create a look-and-feel that is identical to all other customer-facing web pages.

Continuous Security Improvements
Continuous Security Improvements are a long-term, never-ending process to improve the performance of Onegini’s technology stack. Onegini recently added Proof Key for Code Exchange. It is an extension to the Authorization Code flow to prevent certain attacks and to be able to securely perform the OAuth exchange from public clients to improve security & flexibility.