Secure legacy identity workflows
Cloud email accounts are the unofficial identity layer of the web and the key to many other apps. Material Identity Protection discovers and protects legacy authentication workflows, limits the impact of compromised identities, and contains new tools to govern Shadow IT.
%2520(1)%2520(1).avif)
-svg.svg)
A compromised account shouldn't compromise all accounts
Someone with access to an email account can break into other apps tied to that email by initiating password resets—a common form of Account Takeover (ATO). Material limits lateral account takeovers by adding a simple authentication step to access password resets and other identity verification messages.
.png)
Intercept
Material blocks delivery of identity verification emails such as password resets or signup approvals and sends users a challenge message instead.
Challenge
Users confirm messages they requested by verifying their identity via an existing identity provider or custom workflow.
.png)
Unlock
After verification, Material delivers blocked messages to the user's mailbox so they can continue their workflow as usual.
Limit the impact of compromised accounts
Find and address SSO gaps
Discover unfederated and misconfigured apps that still use legacy authentication. Material provides a list of third-party apps used at your organization and the accounts using them by detecting signup confirmations, password resets, and other automated messages.
Block unwanted apps
Users can bypass SSO or OAuth restrictions by signing up for apps with their email. Material intercepts signup emails from blocked apps so users have to go through proper channels for authorization.
Explore more ways to protect your organization
.svg)
Data Protection for Email
Classify and protect sensitive content with right-sized access controls.
Data Protection for Google Drive
Safeguard the sprawl of confidential data throughout your shared files.
Data Protection for Google Drive
Safeguard the sprawl of confidential data throughout your shared files.
Data Protection for Email
Classify and protect sensitive content with right-sized access controls.