Menu

Multi-factor authentication

Groove.id can be used alongside traditional passwords to provide an additional layer of security.

Strong Device Authentication

Every login request starts with a strong cryptographic identification of the device being used. Over time, devices build credibility and trust with Groove.id.

Passive Factors

Groove.id calculates a confidence level for each authentication request using passive factors including GPS location, IP address, user history, device fingerprint, keystroke cadence, mouse movements and more.

Learns Your Habits

Over time, Groove.id learns your habits including the devices you use, your usual locations and typical working hours.

User Choice

You and your users can choose the multi-factor authentication methods that are right for you, including the Groove.id mobile app, FIDO U2F compatible security keys such as a Yubikey, SMS messages, X.509 smart cards, TOTP such as Google Authenticator, and more.

Multi-factor for Virtual Desktop

Groove.id can integrate with Virtual Desktop (VDI) software to provide a second authentication factor for local or remote staff. With a simple configuration change, VMWare Horizon users can authenticate using Groove.id as the second factor.

Virtual Private Networks

When you allow your users sign in to a VPN concentrator using only a password it creates significant risk of attack. A single compromised account could open up your whole network to attack from outside. Groove.id integrates with VPN concentrators like Sonicwall, Cisco and Juniper to provide a second strong authentication factor. Configuration takes only a few minutes.

Network Devices via RADIUS

Many network devices use the (ancient) RADIUS protocol to delegate authentication. Groove.id's support for RADIUS allows you to retrofit modern, secure authentication onto legacy network devices.

Active Directory & LDAP

Many devices and software use the LDAP protocol to delegate authentication to a central directory. Indeed, many systems that allow you to sign in using Active Directory credentials are really using LDAP under the hood. When Groove.id acts as your LDAP server, you can plug modern multi-factor authentication into any device that supports Active Directory or LDAP.