Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

OneLogin Modern Multi-Factor Authentication | 0-Doubt

Home
Vendors
OneLogin
OneLogin Modern Multi-Factor Authentication

Home
Vendors
MFA & Passwordless
OneLogin Modern Multi-Factor Authentication

OneLogin Modern Multi-Factor Authentication

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 9 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

MFA solution with adaptive authentication and multiple verification methods

by OneLogin · onelogin.com · source ↗

Known CVEs (9)

CVE-2025-59363 ↗HIGH 7.72025
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when an App is first created),
CVE-2025-52924 ↗MEDIUM 4.02025
In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header.
CVE-2025-52925 ↗

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other MFA & Passwordless products

Okta Adaptive MFA · Okta
Omnichannel Authentication · Uniken
OnID Biometric Iris Recognition · OnID
OnID Biometric Palm Recognition · OnID
OneLogin SmartFactor Authentication · OneLogin
OneVisage Premier Keys · onevisage
Optimal IdM OptimalMFA - Multi-Factor Authentication Solutions · Optimal IdM
Pointsharp MFA · pointsharp

MEDIUM 5.0

2025

In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812.

…and 6 more · see all on the vendor page →