Skip to main content
Empuls supports MFA and secure session management primarily through its SSO and access-control framework.
Empuls supports MFA and secure session management primarily through its SSO and access-control framework. Xoxoday’s Access Control Policy mandates using SSO + MFA wherever possible and minimising standalone passwords; in practice, Empuls is integrated with your organisation’s IdP (ADFS/Azure AD/etc.), which enforces MFA (OTP, push, biometrics) before issuing a SAML/OAuth token to Empuls. For any residual password-based access, Empuls follows Xoxoday’s password policy with strong-complexity requirements, lockout after 5 failed attempts, and periodic password changes. Session security is enforced via idle-session timeouts, as required by Xoxoday policy: inactive application and admin sessions are automatically closed after a defined period, with re-authentication required for further access; these timeout values can be aligned with your organisation’s internal security standards during deployment. Learn more: Empuls Help Centre

Does Empuls support Single Sign-On and MFA for secure login?

Empuls supports SAML 2.0 and OAuth 2.0 SSO, connecting to your existing identity provider and honouring every MFA policy your IT team has configured.

Empuls' Multi-factor Authentication for Remote Access

Empuls enforces mandatory MFA for all remote access, requiring users to provide multiple forms of verification before entry is granted.