On-Premise MFA
Right-sized and right-priced
Phishing-resistant MFA and traditional MFA
99.999% ("Five Nines") availability
Multiple deployment methods
Eliminate the risks of user authentication in the public cloud. SurePassID makes it easy - and cost-effective - with our advanced, deploy-anywhere MFA platform.
We do on-premise MFA right
SurePassID has been providing modern, advanced on-premise MFA solutions since our founding in 2012.
50% of our customer base - including Fortune 500 companies - relies on SurePassID to secure user access in their on-premise environments.
We are proud to be specialists in on-premise MFA. Find out what our advanced, deploy-anywhere MFA platform - and our unmatched technical expertise - can do for you.
On-premise MFA for Azure GCC High and CMMC 2.0 compliance
Where CUI goes, MFA must follow. That is the essence of MFA compliance with CMMC 2.0 Level 2 and 3.
SurePassID has vast experience in serving the U.S. defense industrial base (DIB) with on-premise MFA solutions - especially in Microsoft Azure GCC High.
Our supported deployment options in Azure and the Azure Marketplace include:
• Infrastructure-as-code (Bicep template)• Virtual machine (Hyper-V)
• Container instance (ACI)
SurePassID also offers a SaaS Private managed hosting option for customers seeking a truly turnkey solution. As longtime specialists in on-premise MFA, we can do it all for you.
Any authentication method, any authenticator
On-premise MFA for financial services
Financial services companies were among the first to embrace private cloud solutions. So was SurePassID, which introduced the world's first private cloud authentication server for online payments, licensed by Visa, MasterCard, American Express, First Data, and Discover.
Since then, SurePassID has continued to innovate on-premise multi-factor authentication (MFA) solutions for the financial services sector:
- Account takeover protection (ATO)
- Secure remote access for employees, contractors, and partners
- Bring your own device (BYOD) solutions
- Highly extensible, highly scalable, highly available
- Automated deployment and administration
- Legacy devices, applications, and data stores
On-premise MFA for healthcare
Securing Controlled Unclassified Information (CUI) for compliance with FISMA/NIST 800-53 and NIST 800-171 /CMMC 2.0 is often done with secure enclaves. These are physically and logically isolated environments where compliance needs can be localized to minimize scope and costs - such as in defense manufacturing.
SurePassID makes it easy and cost-effective to deploy air-gapped MFA within secure enclaves, locking down user access to all CUI no matter where it lives:
- Shop floor machinery - CNC machines, process control equipment, etc.
- Windows, MacOS, Linux, and Raspberry Pi endpoints
- Shared resources like workstations and terminals
- Servers, data repositories, and full-spectrum librarians
- Network appliances within secure enclaves
- Legacy devices and legacy applications
SaaS Private managed hosting option
You need an Azure GCC High instance or other private cloud environment for your MFA solution, but you don't want to manage it yourself. What do you do?
Enter SurePassID. We provide a SaaS Private managed hosting option for our advanced, deploy-anywhere MFA platform.
Dozens of customers ranging from Fortune 500 companies to U.S. cities rely on us to manage their SurePassID MFA private clouds.
Benefit from our our tailored solutions, deep expertise, and unrivaled technical support. Get a truly turnkey solution from SurePassID and the peace of mind that comes with it.
Frequently asked questions about SurePassID on-premise MFA
Is SurePassID an enterprise solution? Or a point solution?
Both, depending on what you need us to be.
As a right-sized solution, we can scale up to global deployments involving 99.999% availability and georeplication, hundreds of thousands of users, and millions of authentications - cost-effectively.
Or we can scale down to a single server instance in an on-premise banking department - just as cost-effectively.
Best of all, it's the same SurePassID software in both places. That's what advanced, deploy-anywhere MFA looks like in action.
Phishing-resistant MFA for on-premise? How?
Easily. We have an on-premise SAML 2.0 IdP for phishing-resistant MFA (FIDO2/WebAuthn).
That enables our on-premise customers to benefit from the gold standard in multi-factor authentication - and comply with cyber liability insurance (CLI) requirements and regulatory mandates.
How long does it take to deploy SurePassID in an on-premise network?
It depends. On-premise deployments vary depending on their scale, complexity, and regulatory requirements.
For a few users and endpoints with only a handful of applications to secure, deployment can be as simple as going live after a brief proof-of-concept.
For multiple sites with large numbers of users, heterogeneous apps and devices, and converged credentials or phishing-resistant MFA requirements, the proof-of-concept and deployment can take months.
Regardless, we always move as fast as you need us to - and our Customer Success team is with you every step of the way.
Can SurePassID integrate with my IAM system?
SurePassID also integrates with third-party directory services, such as Workday, Oracle, and SAP.
We even integrate with legacy financial service systems that have built-in user directories.
I want to deploy SurePassID in a private cloud. Can you manage it for me?
Yes. We have a SaaS Private managed hosting option for Microsoft Azure Commercial, GCC, and GCC High. Contact sales to learn more.
Why risk public cloud MFA and cloud gateways?
Why create new risks?
- New holes in firewall
- New attack vector endpoints
- New software components to maintain, patch, and upgrade
Why lose control?
- Shared SaaS instance
- Authentication data is in public cloud
- 100% dependent on MFA vendor
Why lack capability?
- Can't lock down air-gapped networks
- Can't run in private clouds
- Can't integrate with SIEM/SOAR platforms
Why add costs?
- Extra monitoring and patching processes
- Vendor-required upgrades that don’t meet planned IT infrastructure improvements
Ready to look into on-premise MFA?
You came to the right place. Talk to one of our MFA experts about your needs. Or see how easy it is to deploy SurePassID in your on-premise environment with a free trial.