Cerby Credential Management and SSO for Disconnected Apps

Secure, automated credential management plus a real SSO and MFA experience for the apps that don't support SAML.

Disconnected applications usually leave users to manage their own passwords, MFA, and access sharing, which produces weak passwords, inconsistent MFA, and shared access that lingers after people leave. Cerby closes that gap by centralizing credential management for SaaS, legacy, and on-premises apps, and by giving those apps a real SSO and MFA experience, even when they don't support SAML. It extends modern identity practices to every app without the high SSO tax vendors often charge.

Credentials are stored in a zero-knowledge vault, so they are never exposed, not even to Cerby, and are governed by policies for complexity, rotation, and access. Users launch disconnected apps from their existing IdP dashboard just like any SAML-connected app, and Cerby securely autofills the credentials and MFA codes. Access is granted through your IdP and automatically revoked when it is no longer needed, so no one has to share a password or a 2FA code. This completes your identity stack rather than replacing it.

What Cerby does for disconnected apps:

• Delivers SSO and enforces MFA for apps without native SAML support, with credentials and MFA codes autofilled from the IdP dashboard.

• Stores credentials in a zero-knowledge vault governed by policies for password complexity, rotation, and access.

• Enables secure shared access without revealing passwords or MFA codes, with full audit logs and automatic revocation.

• Automates the full credential lifecycle, capturing, creating, rotating, and revoking credentials through your IdP, eliminating manual updates, tickets, and spreadsheets.

• Logs who accessed which app and when, with export to your SIEM for compliance and visibility.

FOX reduced administrative access tasks by 78 percent with Cerby.

Read the full brief: Credential Management and SSO (PDF)