*All plans are Billed Annually Only. Minimum of 10 total devices required. Premium customer support included in all plans.
Device Authentication (OneIdP Keycard)
Device Login using external Identity Provider
Allow users to login with their IdP credentials and not have to worry about local account credentials.
Device Login using OneIdP Directory
Allow users to login with their IdP credentials and not have to worry about local account credentials.
Auto Domain join and Domain sign-in
Automatically join devices to Microsoft Active Directory and allow for sign-in using domain credentials.
Automatic user provisioning on devices
Allows users to be created automatically when they login using their IdP credentails with the configured privileges.
Device context/posture based Login
Achieve complete security by allowing users to sign-in based on their location, IP, Wifi and Day/Time.
Frictionless Password Sync
Nudge users to login with their online credentails and keep their local account passwords upto date.
Customizable Login Screen
Completely customize the Windows and macOS login screen and provide users with more help options.
Just-In-Time Admin
Privileged Access Management on Windows and macOS
Allows users to gain temporary admin access to perform elevated actions, with granular controls on when they can get access.
Elevation Scope configuration
Configure user accounts that can gain admin access and which applications can be run as administrator on Windows.
Access Summary & Activity Logs
Comprehensive reporting on the user accoiunts who gained admin access and a summary of actions that they performed.
Security Recommendations
Gain insights into potential overuse of admin accounts and recommendations for one-click remedeitation.
Directory
Cloud Directory
Import users from multiple sources like Google Workspace, Microsoft Entra or other on-prem directories and manage them.
Free *.oneidp.com Directory
An inbuilt directory to manage frontline worker identities and shared device identities.
Password Management & Policies
Complete control on password policies for secure access and ability to reset passwords on demand.
Multi-Factor Authentication
Ability to authenticate via popular 3rd party authenticators or OTPs over email.
Identity Federation using Microsoft On-Prem Active Directory
Faster user adoption with our on-prem connector that allows users to use their existing credentials.
Identity Federation using Google Secure LDAP
Faster user adoption with our on-prem connector that allows users to use their existing credentials.
Identity Federation using SAML
Faster user adoption with our on-prem connector that allows users to use their existing credentials.
Zero-Trust Application Access
Local Admin Password Solution (LAPS)
Discover and manage privileged Admin accounts by choosing appropriate access level or auto-rotating passwords for security
Enterprise grade Single-Sign On
Uncompromised and seamless Single sign on experience on desktops using browsers and on mobiles using populare native applications.
Enhanced SSO for managed devices
Enable password-free SSO on managed devices with secure, authorized access for the right user on the right device.
Extended Access Policies (XAP)
Enforce conditional SSO with device trust, location, IP, and app installation status for secure, compliant access.
Conditional and Context aware access
Enforce conditional access based on Browser context, and device management state. Uses least privilege principles to block access unless the device and user is trusted.
Automated user-assignment and scope management
Allows IT Admins to rollout SSO in phases and reduces the deployment time by integrating with APIs provided by populare services like Google Workspace and Microsoft 365.
Support for SAML/OIDC apps with Custom Attributes and JIT user provisioning
Supports integration with populare service providers like Google Workspace, Microsoft 365, Salesforce using SAML and supports for JIT user provisioning.
Company User Portal for Single Sign-On
A centralized platform designed to view and launch all assigned apps from a single portal to simplify application access.
Access Core
Device authentication, directory integration, and JIT admin.
Block websites by predefined categories such as social media, gaming, or adult content.
Custom blocklists and allowlist overrides
Block specific domains you define, and allow trusted sites to override those blocks for exceptions.
Malicious domain and non-compliant URL/IP blocking
Automatically block known malicious domains and non-compliant URLs and IP addresses.
Cloud app login controls (Google, Microsoft)
Restrict which accounts can sign in to Google and Microsoft cloud apps.
On-device enforcement, independent of network
Filtering is applied directly on the device, whether it is on or off the corporate network.
User block notifications and bypass app list
Show a custom message when access is blocked, and exempt trusted apps from filtering
VPN (On-Premise Only)
WireGuard-powered business VPN
Fast, modern encrypted tunneling built on the WireGuard protocol.
On-premises VPN server deployment
Host the VPN server on your own infrastructure for full control.
Centralized configuration and deployment
Configure and roll out the VPN to devices from the Scalefusion console.
Automated tunnel creation
Veltar handles tunnel creation, user configuration, and deployment.
Managed-device-only access
Restrict VPN access to enrolled, managed devices only.
Mobile Threat Defense (Check Point Harmony)
Powered by Check Point Harmony integration *Requires an active Check Point Harmony subscription.
Mobile threat defense delivered through the Check Point Harmony integration.
Compliance
CIS benchmark enforcement
Enforce CIS security benchmarks — Level 1 and 2 on Apple, and Level 1 on Windows.
Android compliance via Device Trust signals
Assess Android compliance using Device Trust risk signals.
Automated remediation (Apple, Windows, Android)
Automatically fix non-compliant settings without manual admin action.
Pre-built, audit-aligned rule sets
Start quickly with more than 160 Apple and 40 Android rules aligned to audit standards.
Custom rule sets and policy grouping
Build your own rules and group policies for different sets of devices.
Continuous compliance monitoring
Re-check device compliance at intervals ranging from 15 minutes to 2 hours.
Device risk tracking and compliance reporting
Track live device risk posture and generate compliance reports and audit logs.
I/O Device Access Control
Global USB access modes
Set USB behavior globally to Read/Write, Read Only, or Block.
Per-device rules (Vendor, Product, or Serial ID)
Allow or block specific peripherals by Vendor ID, Product ID, or Serial Number.
Encryption enforcement
Require connected storage devices to be encrypted before access is granted.
Control iPhone and iPad connections to macOS
Manage how iPhones and iPads are allowed to connect to macOS devices.
Data transfer prevention via I/O and USB
Prevent unauthorized transfer of sensitive data through I/O devices and USB peripherals.
Application Control
Match apps by Team ID, Bundle ID, certificate, or hash
Identify apps precisely using Team ID, Bundle ID, signing certificate, or file hash.
Conditional access by time and IP
Allow or block app access based on day, time, and device IP address.
Silent or message-based blocking
Choose whether blocked apps fail silently or show the user a message.
User-level and device-level rules
Apply application rules selectively per user or per device.
Blocked-access analytics and logs
Review analytics and detailed logs of every blocked app access.
The Scalefusion 360 Enterprise Suite combines the best of Scalefusion UEM, OneIdP and Veltar to provide unmatched endpoint management, Zero Trust access, and robust endpoint compliance & security for your organization.
Register your interest for Scalefusion 360 Enterprise plan
Frequently asked questions
When you sign up for your trial of Scalefusion you'll have access to all the features for 14 days. We don't restrict features in free trial. At any point during the trial you can choose a plan and pay by credit card from within your account.
Absolutely not. Cloud deployments with Scalefusion are free of charge, with no setup fees or hidden costs. If you need professional services for deployment support, these are billed separately by Scalefusion or our authorized partners.
Visa, MasterCard, American Express and wire transfers. In case of wire transfers please get in touch with us for banking details.
Yes! We offer discount for NGOs and educational institutions. Simply Contact Us to know more.
