app

SSO enhances SaaS access security by streamlining logins via a single identity provider, but it cannot fully secure all company applications. The rise of remote work and diverse tools has widened the Access-Trust Gap, exposing unmonitored identities and devices. SSO is vulnerable to outages, superadmin access, and challenges in integrating contractors or legacy accounts. It also lacks oversight for AI agents and can be compromised. Companies need supplementary solutions like Device Trust and Extended Access Management to address these gaps, ensuring secure, continuous access for all users, devices, and AI tools.

https://blog.1password.com/sso-cant-secure-every-identity/

1Password announced Extended Device Compliance at RSAC 2025, enhancing Device Trust by enforcing device posture checks for accessing web applications beyond SSO, addressing the Access-Trust Gap created by unmanaged devices and apps. This integrated solution allows real-time device health checks via the browser, ensuring security policies are applied across various applications without complicating workflows. Key features include centralized app discovery, compliance enforcement, user-guided remediation, and seamless re-access post-compliance. Available in Device Trust Core and Device Trust Connect versions, it offers comprehensive protection for both SSO-dependent and non-SSO environments.

https://blog.1password.com/enforce-device-posture-beyond-sso-with-extended-device-compliance/