Access Manager

Overview

Access Manager provides additional administration functionality for your Google Apps deployment to help you to better manage and control how your users access Google Apps. Access Manager functions are not provided by Google.

Password Sync

Access Manager synchronizes passwords from your internal systems to Google Apps. In real time. With no new infrastructure.  Supports Microsoft Active Directory; OpenLDAP and database integration coming soon.

Windows single sign-on

Access Manager enables your users to automatically login to Google Apps as long as they are logged into their corporate desktop.

Login Management

Access Manager allows you to customize the login process - to match your branding or highlight your latest news. You control the login process, so you can control password strength, login as others, or track login attempts.

One time passwords

With Access Manager, you can harden the login process for everyone or just the sensitive accounts with one-time SMS or mobile passwords.

Powered by Google

Access Manager is a cloud service powered by the Google App Engine. This means that we scale to handle your traffic, no matter how unexpected. As we run on the same infrastructure as the rest of Google, the same physical data center security that protects your Gmail applies to Access Manager.

Optimize User Experience

Single sign on means fewer passwords to remember, and fewer login screens. This makes for happier and more productive users. Access Manager gives your users the experience they expect - no new passwords, no new login prompts.

Reduce Helpdesk workload

Forgotten passwords are the number one reason for calls to IT Helpdesk. Access Manager eliminates the need for multiple usernames and passwords, and allows your users to log into more online systems using their existing credentials.

Improve security

Reduce the risk of identity theft or disclosure and protect access to key user accounts with Access Manager two-factor authentication. Gain full visibility to login activity and quickly identify accounts with anomalous activity.

Simplify compliance

Improve compliance and limit your exposure by quickly and automatically locking out staff who leave your organization and accounts that have been compromised from access to Google Apps and other online services. Simplify legal discovery processes with Access Manager's auditable log facilities.

Future-proof with Google

Leverage the massive investment Google makes in security and authentication interoperability. With your user identities synchronized to Google Apps by Access Manager, your users can safely log in to any sites that use OpenID.

Go Live faster - no new infrastructure

Deliver Google Apps to your users faster and will less risk - Access Manager requires no new infrastructure, and is designed to be deployed over a weekend.

Access Manager puts you in control

All of the features below can be accessed, configured and controlled from the Access Manager administrative console. You can view your configuration, make and apply changes immediately, or review logs and audits online.

Turn on Access Manager in minutes

Access Manager is provided as a cloud solution. This means it can be configured against your Google Apps account and you can be using it in as little as 15 minutes after contacting us.

Password Synchronization

Google Apps maintains its own password list for your users; although this is convenient for small organizations, it becomes a serious usability and support problem for large organizations. Access Manager makes it easy to synchronize your existing passwords with Google Apps.

Install a small component on your Active Directory domain controllers, and your user passwords will be automatically pushed out with Google Apps. Your users and administrators then manage and change passwords in the same way they always have, and synchronization occurs in real time. Help desk procedures do not need to change, users do not need to remember another password, and because the password is stored Google Apps, it works for all methods of access including POP3, IMAP, and mobile apps.

Through our experiences with large enterprises, we understand that your internal directory listings are not always straight forward to map to Google Apps. Access Manager includes the ability to configure users and groups that will not be synchronized. It also matches users based on the mail address and not the username -- allowing you to apply address naming standards that differ from your internal systems.

Windows Single-Sign-On

Your users don't need to login to their email if they are already logged into network.  Once you set-up windows single sign on, when a user accesses their Google App mail account from their browser, it automatically and securely authenticates with the user's network login credentials. If they are logged into your network, then there are no additional prompts shown to gain access to their gmail.

And this in no way means that you have to expose any of your systems to Google. It all happens through the user's browser, so your network credentials are kept within your network. You also configure your IP address ranges so that only when users that are coming from within your network with be able to use single sign-on.

Two-factor Authentication

You can add an extra layer of security to your email with two-factor authentication. We also make it easier by allowing you to apply two-factor authentication on a subset of users who may have more sensitive or critical information. Your one time password can be generated by sending to your users via SMS, or by using a OTP application that the user installs on their mobile phone.

Access Plus

There are many scenarios where it becomes necessary for an admin or manager to have access to someone else's email account. It could be to assist in support and troubleshooting, to handle staff transitions, or to allow teachers access to their student's accounts to enforce anti-bullying or other school policies. Access plus allows select users to login to other email accounts. It's simple and easy to set-up, and doesn't require anyone to change to give away their password. In addition, all logins using the access plus feature are logged so that you have a full audit trail of email access on your domain.

Logging

You need to know who is trying to access your email, so you can access security concerns, understand your email usage patterns, and ensure your users are getting trouble-free access when they need it. Access manager provides detailed logs of every attempt to log in, including username, IP address, and whether they were successful or not.

User Interface customization

This is your email system so it should look like yours. With Access Manager you have full control over the branding of your login and password pages as well as control over all text that is displayed. In fact, you can change the text on the fly - adding important company news updates or changing information on support procedures. The login page is the perfect place for this information since you know your users will be viewing it.

Stay Signed-On

The Google Apps login page includes a check box that allows the user's to stay signed on, but you may have corporate policies that don't allow this. Access Manager allows you to configure whether there is a stay signed-on checkbox, and if so, how long this is valid for.

Password Change

Your company may have their own password change page, in which case the user should be re-directed there. Or you might simply have a password change policy or procedure that the user needs to see. Or you may allow users to change their password but want to enforce password policies (such as length and complexity). Access Manager allows all of this to be configured simply and easily through the admin interface.

Auto-Login

You may already have an intranet or portal that centralizes your information and systems. Access Manager allows you to integrate Google Apps login within these systems so your users get the experience they are expecting.

Google Analytics Integration

You can provide your Google analytics ID to gain detailed visibility to activity by your users.

Plan summary

Access Manager is available in three plans based on different bundles of features. All pricing is in US dollars. For a full breakdown of the features in each plan please see the detailed plan comparison.

Connect

Connect plan provides the core features of Access Manager and can be up and running in your domain in minutes. It is intended for organizations that do not require the ability to synchronize their passwords with Google Apps.
$1.00 per user per month

Enterprise

The Enterprise plan is aimed at organizations that require the full feature set of Access Manager to be deployed in a complex environment. Enterprise customers are assigned an Account Manager and have full access to our resources to ensure a successful delivery.

Integrate

Integrate plan provides access to the password synchronization and Windows Single-Sign-On functionality to integrate with your existing authentication systems to give users a single password.
$2.50 per user per month

Two Factor Authentication (add-on)

Two-Factor module provides additional security for sensitive accounts (HR, executive team) using additional passwords sent by SMS or generated on the user's phone.
additional $2.00 per user per month

Learn more...

Getting started

Getting started is easy. With our free trial you can test-drive Access Manager and explore how it can help you deliver better integration, faster.

Pre-requisites

Before signing up with your own Google Apps domain, please make sure it is a Google Apps Premiere or a Google Apps Education Edition domain; to operate, Access Manager requires access to features that are not available in the Google Apps Standard or Google Apps Partner edition.

If you don't yet have a Google Apps domain, that's no problem. You can contact us, or get a free 14 day trial Google Apps Premiere domain, and use it to evaluate Access Manager.

Education and Not-for-profit

If your organization is a not-for-profit involved in the delivery of humanitarian assistance, healthcare, education or social services to disadvantaged populations, Access Manager may be free, excluding features that require SMS such as two-factor authentication. Please note that to use Access Manager for free you must also qualify for access to Google Apps Education Edition.

We provide special pricing for educational institutions that qualify for Google Apps Education Edition. Questions?