Tenfold Security

Short Summary

Identity & Access Management (IAM) has become central to enabling convenient user access while meeting cybersecurity, regulatory compliance, and administrative efficiency goals. A core requirement is enforcing least privilege through controlled, centralized management of accounts and entitlements. IAM broadly spans Identity Governance & Administration (IGA), Access Management, and Privileged Access Management (PAM), with adjacent specialties like password management and secure information sharing. While large enterprises typically have mature IAM programs, many mid-market and medium-sized organizations still rely on a combination of baseline Microsoft Active Directory/Azure Active Directory functions and manual administration, with PAM handled—if at all—through low-level technical tools. This leaves a significant gap in IGA, especially because many established IGA platforms are optimized for large enterprises and introduce deployment and operational complexity that smaller organizations struggle to execute.

Tenfold Security targets this gap with Tenfold, an IGA platform designed for mid-market needs, emphasizing automation, self-service, and strong transparency through reporting. Tenfold is centered on Microsoft environments, integrating deeply with Active Directory, Windows file permissions insights, Exchange Server, SharePoint, Azure AD, and Microsoft 365. It supports joiner/mover/leaver lifecycle processes, automated provisioning and deprovisioning, one-time secret initial password distribution, AD group management, and self-service access requests with approval workflows (including functional resources like VPN access). For Microsoft 365, Tenfold addresses Azure AD guest user governance, Teams ownership/permission workflows, Exchange Online permissions, and license/app assignment.

Governance features include change tracking (including “out-of-band” admin changes via Tenfold Auditor), flexible workflows with escalation, entitlement recertification with configurable intervals, and RBAC with role mining. Tenfold offers broad source/target integrations and standard connector options, but is currently on-premises only and focuses on IGA rather than PAM or Access Management.

Interesting Facts

• IAM is divided into IGA, Access Management, and Privileged Access Management (PAM).
• IGA includes user lifecycle management (Joiner/Mover/Leaver), identity provisioning, and access governance.
• Many mid-market organizations rely on Microsoft Active Directory/Azure Active Directory plus manual administration rather than comprehensive IAM.
• Tenfold is an IGA solution targeted at mid-market and medium-sized businesses.
• Tenfold supports Microsoft Active Directory, Windows File Servers, Exchange Server, SharePoint, Azure Active Directory, and Microsoft 365.
• Tenfold provides a one-time secret method for initial password delivery that must be changed at first authentication.
• Tenfold includes workflows for access requests and approvals and then automatically provisions or removes access after approval.
• Tenfold Auditor can analyze changes made directly in source systems without using Tenfold workflows.
• Tenfold supports entitlement recertification with configurable review intervals and email alerts to responsible data owners.
• Tenfold is currently available only as an on-premises solution and not as a fully managed IDaaS offering.

Notable Quotes

• “Efficiently managing and restricting access to systems and applications and enforcing the least privilege principle is essential to any organization.”
• “While IAM is established in large organizations, many mid-market and medium-sized organizations are still lacking a comprehensive IAM solution.”
• “While such solutions are powerful and feature-rich, their complexity in deployment and operations exceed what most mid-market and medium-sized organizations can execute.”
• “There is a need for solutions that deliver the capabilities that are required by such organizations, but without the overhead and complexity of many of the IGA solutions targeted at large enterprises.”
• “Tenfold also supports a secure method for providing an initial password as a one-time secret to new users, which then must be changed during the first authentication.”
• “Notably, resources span beyond just entitlements and could also include functional resources such as VPN access.”
• “With the emergence of Microsoft Azure Active Directory, which comes with Microsoft 365 (formerly Office 365), managing these environments and their specifics has become a must for many organizations.”
• “By inviting externals to Microsoft Teams, such guest accounts are created automatically, but are hard to track and manage.”
• “Regular access reviews are a requirement of various regulations, to verify that the least privilege principle is enforced.”
• “Tenfold is a well thought out and feature-rich IGA solution for mid-market and medium-sized organizations.”