ManageEngine Identity360: Cloud-native platform for workforce identity and access management
ManageEngine Identity360, a cloud-native identity platform, addresses workforce IAM challenges. Its features comprise a built-in Universal Directory, identity orchestration, SSO, MFA for enterprise apps and endpoints, role-based access control, access management, help desk delegation, detailed reports, and more. With Identity360, enterprises scale effortlessly, ensuring compliance and identity-first security.
Features
- Built-in Universal Directory for unified identity management.
- End-to-end identity life cycle management, from user onboarding to offboarding.
- Orchestration platform with smart templates to streamline IAM workflows.
- Comprehensive single sign-on for cloud applications to eliminate password fatigue.
- Multi-factor authentication solution for enterprise applications with MFA audit reports.
- Cross-platform integration with various applications and directories.
- Help desk delegation offloading management tasks to non-administrative users.
- Access management for end-user support.
- Comprehensive access insights with predefined reports and audit.
Benefits
- Improve security levels with advanced role-based access control (RBAC).
- Enhance regulatory compliance standards by utilising pre-defined audits and reports.
- Simplify user life cycle management with orchestration and smart templates.
- Increase productivity levels by automating user onboarding and access management.
- Cut operating expenditures by cloud-based automation of routine tasks.
- Fostering seamless user environments through user-friendly, effortless experiences.
- Accommodate growing organisational needs with our cloud-powered, scalable solution.
- Enhance endpoint security against cyberattacks using MFA.
- Empower admins to delegate daily tasks and prioritise critical responsibilities.
- Integrate and centralise administration of various applications and directories.
Pricing
£156 a licence a year
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
9 1 0 0 8 6 2 2 5 3 4 6 3 0 3
Contact
Zoho Corporation Limited
Sreyas Benjamin
Telephone: +44 2038072092
Email: zohouk-gcloud@eu.zohocorp.com
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Public cloud
- Service constraints
- With respect to ManageEngine Identity360's maintenance, we conduct it with every release—whether minor or major—without any downtime. However, during significant cleanup tasks, database overhauls, or major architectural changes, we notify customers at least one month in advance about the maintenance. During this period, the product will only be available in 'Read-only' mode and no 'Write' operations can be performed. We guarantee high availability of our service with minimal downtime. Our product is designed for scalability to accommodate the growing needs of all organisations. In case of feature deprecation, we will announce in advance an improvised alternative or new feature upgrade.
- System requirements
- No specific technical requirements or client-side requirements.
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
-
ManageEngine offers two tiers of support - Classic Support and Premium Support.
Support requests and email queries will be acknowledged within regional 8 business hours for classic support, available only on weekdays. Premium support guarantees a 3-hour response time, including weekends and holidays, at an additional cost. We also do have escalation SLAs defined for Premium support requests.
Please refer to our support page manageengine.com/support.html for more information. - User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- Web chat
- Web chat support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support accessibility standard
- None or don’t know
- How the web chat support is accessible
-
Users can access our web chat support by clicking on the support icon located at the bottom left on our product website. This allows them to seek technical assistance. Alternatively, users can initiate web chat from the product portal's 'Support' tab for access to resources, custom features, support tickets, and personalised pricing quotes. (manageengine.com/identity-360/support.html)
1) Mouseless intervention:-
The application has been designed to be entirely usable without the need for a mouse device. It supports mouseless intervention, enabling navigation using the following keys:
Tab- Forward navigation; Shift+Tab- Backward navigation; Enter/Return- Option selection.
2) Zoom Controls and font size:-
The application is fully adaptable with Zoom control support ranging from 80% to 125%, regardless of the device (whether small or large) being used. This enhances overall product visibility. Additionally, it supports maximum readability by allowing users to adjust the font size of the content/text within (small, medium, or large) as desired, thereby enhancing clarity and legibility.
3) Screen Reader Compatibility:-
Our text-only application is compatible with screen reader extensions. These extensions enable the focus area on the screen (either through the tab key or mouse click) to be read aloud, making all content accessible. - Web chat accessibility testing
- The application has undergone manual testing for navigation and readability. Compatibility with screen readers has been tested using the Chromevox extension, which reads aloud the focused content on the screen.
- Onsite support
- Yes, at extra cost
- Support levels
-
ManageEngine offers two tiers of support (www.manageengine.com/support.html)
Classic Support provides access to product updates, patches, and version upgrades. It includes email-based, web chat technical support during business hours, typically Monday through Friday.
The response time for Classic Support is within 8 business hours.
Customers with Classic Support can utilise the ManageEngine knowledge base, user forums, and other self-help resources.
Premium Support offers all the benefits of Classic Support along with additional advantages. This includes 24x7 email-based technical support, anytime call+web chat support ensuring assistance at any time, day or night, including holidays. Premium Support also provides access to telephone support during business hours.
Premium Support typically guarantees faster response times compared to Classic Support. The specific response time may vary depending on the severity of the issue.
With Premium Support, customers are assigned a dedicated support engineer who provides personalised assistance and guidance.
Premium Support subscribers receive emergency patch updates in critical situations, ensuring rapid resolution of urgent issues.
Premium Support may include proactive monitoring of the customer's environment, helping to address potential issues before they impact operations.
Premium Support offers escalated issue management, ensuring that critical problems are prioritised and resolved promptly. - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
-
Effective onboarding is critical for our ManageEngine Identity360. We provide admin guides, user guides, technical guides, and live free training sessions to assist users with setup and troubleshooting. Additionally, we offer professional services for expert implementation, both online and on site, at nominal costs. Our personalised online training and product certification can be purchased at an additional cost.
If you prefer to learn at your own pace, we provide an online option offering comprehensive training from experts. All you need is an internet connection, and the training will be delivered over the web. Reduce your travel expenses with online training. - Service documentation
- Yes
- Documentation formats
-
- HTML
- Other
- Other documentation formats
-
- DOCX
- RTF
- TXT
- Z DOC
- End-of-contract data extraction
- Data extraction capabilities are intentionally limited. To ensure data continuity, we do offer support for exporting data in PDF and CSV formats. In special cases, data extraction as a service can be provided. If the user has opted for normal account closure, we retain the data for 90 days.
- End-of-contract process
- Upon subscription expiration, customers will retain access to existing log data within the scope of the free edition of ManageEngine Identity360. This information is available indefinitely. Access to resources will remain free, with ongoing support available to customers. Once the contract is terminated, the account can be restored within 90 days of deletion. However, after this period, data retrieval is not possible.Customers also have the option to utilise our professional services, wherein a ManageEngine Identity360 technical specialist will manage the entire off-boarding process from start to finish. This service incurs an additional cost.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- The user interface and user experience of ManageEngine Identity360 differ notably between desktop and mobile devices. While accessing the platform on a mobile phone, although there is no reduction in functionalities, users might encounter navigation challenges. Our product is optimised for mobile use, yet it excels particularly when viewed in portrait mode. Our responsive user interface ensures seamless interaction, enhancing accessibility and functionality. Whether on a desktop or mobile device, users can expect an intuitive and efficient experience while navigating through Identity360's features and capabilities.
- Service interface
- Yes
- User support accessibility
- None or don’t know
- Description of service interface
- ManageEngine Identity360 offers a user-friendly web interface, thoughtfully designed with an array of menus and tabs to enhance accessibility and streamline user interaction. This interface serves as a gateway to a diverse range of functionalities, including the Universal Directory, multi-factor authentication (MFA), single sign-on (SSO), and a host of other essential services. Each feature is strategically integrated into the interface, ensuring seamless navigation and empowering users to effortlessly manage their identity-related capabilities. With its intuitive layout and robust functionality, Identity360's service interface provides a unified platform to efficiently execute critical operations and enhance security protocols.
- Accessibility standards
- None or don’t know
- Description of accessibility
- ManageEngine Identity360 is accessible across major browsers such as Google Chrome, Microsoft Edge, Mozilla Firefox, and others, without requiring any downloads. It caters to users on desktops, laptops, and mobile phones through browser access. Notably, it respects users' individual display preferences, refraining from overriding contrast or color settings. Users can navigate seamlessly via keyboard or mouse, configure fields with hover hints having tooltips, and enjoy uninterrupted use without compromising the activated features of other products.
- Accessibility testing
- ManageEngine is working to reach WCAG accessibility standards for Identity360 Cloud. We are yet to perform any interface testing with users of assistive technology.
- API
- Yes
- What users can and can't do using the API
- We provide API for identity lifecycle management, enabling the management of user identities and Multi-Factor Authentication (MFA) enrollment. However, only specific, limited features can be configured using this API.
- API documentation
- Yes
- API documentation formats
-
- HTML
- API sandbox or test environment
- No
- Customisation available
- Yes
- Description of customisation
- ManageEngine Identity360 empowers administrators with extensive flexibility to tailor their console settings according to their preferences. Within the 'Personalisation' tab located under 'General Settings,' admins can seamlessly customise display settings, and enable support access for efficient issue debugging by the support team. Additionally, admins can customise the welcome name, time format, date format, and time zone. They can enable password protection for report exports and customise the portal URL, organisation logo, and navigation menu. Moreover, they can enable support access for assistance with bugs, specifying the duration of access. This suite of customisation options ensures administrators can create an interface that optimally suits their workflow and organisational requirements. Furthermore, this customisation is available at no added cost, emphasising Identity360's commitment to delivering value to its users without financial constraints. With the ability to personalise their console environment effortlessly, administrators can enhance productivity and streamline operations with confidence, knowing they have the tools necessary to effectively manage their identity and access management system.
Scaling
- Independence of resources
- Our framework distributes and maintains the cloud space for our customers. Each customer's service data is logically separated from other customers' data using a set of secure protocols in the framework. This ensures that no customer's service data becomes accessible to another customer. The service data is stored on our servers when you use our services. Your data is owned by you, and not by ManageEngine, a division of Zoho Corporation. We do not share this data with any third party without your consent.
Analytics
- Service usage metrics
- Yes
- Metrics types
- ManageEngine Identity360 is licensed based on the number of users. The users can view the number of licensed and unlicensed users. It provides access insights through our portal, which gives valuable information gathered from monitoring and analysing user interactions and access activities within systems, applications, and resources. All of the reports are placed under the "Reports" tab, providing insights into user-related data across your integrated directories such as Universal Directory, Azure AD, and Salesforce. With these reports, administrators gain visibility into various aspects such as user and admin activities, application access, MFA attempts, license consumption, password expiration, and more.
- Reporting types
-
- Real-time dashboards
- Regular reports
- Reports on request
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- Other locations
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- In-house
- Protecting data at rest
-
- Physical access control, complying with another standard
- Encryption of all physical media
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed
- Equipment disposal approach
- A third-party destruction service
Data importing and exporting
- Data export approach
- Users can export data as reports in CSV, PDF, HTML, and XLS formats. To export a report, the user must select it and access the 'Export As' menu in the top-right corner of the 'Reports' tab. Then, the user must choose the desired file format (CSV, PDF, HTML, or XLS), and the report will be queued for export. To track export history, the user should click the export history icon. Additionally, the user can hover over the exported report to access options such as Download to save, Mail to send via email, or Delete to remove from history.
- Data export formats
-
- CSV
- Other
- Other data export formats
-
- XLS
- HTML
- Data import formats
- CSV
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- TLS (version 1.2 or above)
- Other
- Other protection between networks
-
We mandate all connections to our servers use Transport Layer Security (TLS 1.2/1.3) encryption with strong ciphers including web access, API access, mobile apps, and IMAP/POP/SMTP email client access. For email, we leverage opportunistic TLS that encrypts and delivers email securely, mitigating eavesdropping between mail servers where peer services support this protocol.
Full support for Perfect Forward Secrecy (PFS) with encrypted connections ensuring that even if we were somehow compromised in future, no previous communication be decrypted. Enabled HTTP Strict Transport Security header (HSTS) to all our web connections. On the web, we flag all our authentication cookies as secure. - Data protection within supplier network
- Other
- Other protection within supplier network
- We use firewalls to prevent our network from unauthorised access. Our systems are segmented into separate networks to protect sensitive data. Sensitive customer data at rest is encrypted using 256-bit Advanced Encryption Standard (AES). The data that is encrypted at rest varies with the services you opt for. We own and maintain the keys using our in-house Key Management Service (KMS). We provide additional layers of security by encrypting the data encryption keys using master keys. The master keys and data encryption keys are physically separated and stored in different servers with limited access.
Availability and resilience
- Guaranteed availability
- Our monthly service uptime is 99.9%. The live service availability status can be seen at status.manageengine.uk or status.manageengine.com or status.manageengine.eu depending on the hosting location. Upon customer request, Zoho will, as per the terms and conditions of its Service level agreement, provide service credits.
- Approach to resilience
- In ManageEngine, a division of Zoho Corporation, a proper Business Continuity Plan & Disaster Recovery (DR) is in place. The data from our primary data centre is streamed continuously to our DR data centre. Hence, in case of any disaster in our primary data centre, the DR data centre will take over and continue serving with minimal delay, hence ensuring high availability.
- Outage reporting
- Service outages can be viewed at status.manageengine.uk or status.manageengine.com or status.manageengine.eu depending on your hosting location and will be notified via blogs, forums, social media handles and in-app banners.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Dedicated link (for example VPN)
- Username or password
- Access restrictions in management interfaces and support channels
- ManageEngine Identity360 extends help desk delegation capability whereby technicians, who are non-administrative users, are authorised to carry out the tasks delegated by the IT admin. These technicians aid users in resolving IT issues, provide solutions to common technical challenges, and manage administrative duties to reduce the IT admin's workload.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Username or password
- Other
- Description of management access authentication
-
We control access to our resources with the help of access cards. We provide employees, contractors, vendors, and visitors with different access cards that only allow access strictly specific to the purpose of their entrance into the premises.
At our Data centres, a co-location provider takes responsibility for the physical security, while we provide the servers and storage. Access to the Data centres is restricted to a small group of authorised personnel. Additional two-factor and biometric authentication are required to enter the premises.
We monitor entry and exit movements in all our business centres and data centres through CCTV cameras.
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- No audit information available
- How long system logs are stored for
- Between 1 month and 6 months
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- BSI
- ISO/IEC 27001 accreditation date
- 09/08/2022
- What the ISO/IEC 27001 doesn’t cover
- Our Data centres
- ISO 28000:2007 certification
- No
- CSA STAR certification
- Yes
- CSA STAR accreditation date
- 01/03/2023
- CSA STAR certification level
- Level 1: CSA STAR Self-Assessment
- What the CSA STAR doesn’t cover
- N/A
- PCI certification
- No
- Cyber essentials
- No
- Cyber essentials plus
- No
- Other security certifications
- Yes
- Any other security certifications
-
- ISO/IEC 27701
- ISO/IEC 27017
- ISO/IEC 27018
- ISO/IEC 20000
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
- Zoho shall maintain an information security program in accordance with the international standard ISO 27001, which includes technical and organisational security measures, physical measures, as well as policies and procedures to protect customer data processed by Zoho against accidental loss, destruction, or alteration, unauthorised disclosure or access, or unlawful destruction. Zoho maintains documented information security and data privacy policies and requirements and periodically communicates them to employees responsible for various controls. The policies are reviewed annually to keep them up-to-date. This policy is verified during our third-party audits such as ISO and SOC.
Operational security
- Configuration and change management standard
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Configuration and change management approach
- We have Change Management procedures in place that include, but are not limited to, all changes to the organisation, applications, systems, people, technology, and processes, as well as information processing facilities that affect information security/privacy. For every change, the security impact is analysed. We maintain audit logs as evidence for all changes. Fall-back procedures, including procedures and responsibilities for aborting and recovering from unsuccessful changes and unforeseen events, are documented and communicated. Zoho shall notify the customer of any changes that may affect the customer adversely.
- Vulnerability management type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Vulnerability management approach
-
Our dedicated vulnerability management process actively scans for security threats using a combination of certified third-party scanning tools and in-house tools, along with automated and manual penetration testing efforts. Furthermore, our security team actively reviews inbound security reports and monitors public mailing lists, blog posts, and wikis to spot security incidents that affect the company’s infrastructure.
Once we identify a vulnerability requiring remediation, it is logged, prioritised according to severity, and assigned to an owner. We further identify the associated risks and track the vulnerability until it is closed by either patching the vulnerable systems or applying relevant controls. - Protective monitoring type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Protective monitoring approach
- We monitor and analyse information gathered from services, internal traffic in our network, and usage of devices and terminals. We record this information in the form of event logs, audit logs, fault logs, administrator logs, and operator logs. These logs are automatically monitored and analysed to a reasonable extent to help us identify anomalies, such as unusual activity in employees’ accounts or attempts to access customer data. We store these logs on a secure server isolated from full system access to manage access control centrally and ensure availability.
- Incident management type
- Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
- Incident management approach
-
Our incident management team notifies you of the relevant incidents and actions needed. We track and close the incidents with corrective actions. Whenever applicable, we will provide you with necessary evidence in the form of application and audit logs regarding incidents. Furthermore, we implement controls to prevent the recurrence of similar situations.
We respond to the security or privacy incidents you report to us (incidents@zohocorp.com) with high priority. For general incidents, we will notify users through our blogs, forums, and social media. For incidents specific to an individual user or organisation, we will notify the concerned party through email.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
We've partnered with Equinix to host our UK data centres in London and Manchester. Equinix is also committed to sustainability and is compliant with the Climate Neutral Data Centre Pact, ISO 14001, LEED, etc. The energy supply for the Zoho UK’s workspace at Bletchley is derived from renewable sources, accounting for 21% of total power consumption. LED retrofits have been implemented to enhance energy efficiency throughout the building. Designed with a focus on energy efficiency, data centres that support Zoho UK are powered by renewable energy. Further, these data centres are progressing towards integrating with a solar grid to reduce environmental impacts. All purchased energy for the data centres is sourced from green energy providers. This enables us to minimise the carbon footprint associated with our operations. The United Kingdom has committed to achieving carbon neutrality by 2050. Supporting this pledge, we have taken steps to monitor greenhouse gas (GHG) emissions from our operations and implement measures to mitigate them. We account for Scope 2 and Scope 3 emissions and exclude Scope 1 emissions as our work does not involve fuel combustion within operational boundaries. We've switched completely to electric vehicles for movement within the campus.Covid-19 recovery
During the COVD-19 pandemic, Zoho worked to minimise the impact of COVID on our customers, other business and our local community. At the start of the pandemic, Zoho created and distributed a Secure Remote Access Toolkit to help organisations quickly adapt to and work securely during the pandemic. This toolkit was made free for the first 100 days. To assist organisations impacted by the pandemic, Zoho offered free licenses of flagship products, and offered discounts and waivers on licenses on a case-by-case basis. While most of our employees worked from home, we kept the kitchen at our Chennai headquarters running with a skeletal staff to provide food to underprivileged people in the local area, many of whom were impacted due to a loss of employment during the lockdown. We converted one of our office buildings into a temporary COVID-19 ward to accommodate citizens who were required to quarantine. We ran vaccination camps to our employees, their dependents and the support staff who worked in Zoho.Tackling economic inequality
Zoho has always aimed to tackle economic inequality and give back to the community. This is reflected in the following: Coined by our CEO, transnational localism is the philosophy that underpins our staffing and office location plans. Instead of focusing on crowded urban centres, we've been opening spoke offices in smaller towns and villages. The goal is to improve local infrastructure, boost the economy of these smaller towns and villages, and provide more employment opportunity. As part of our philosophy of transnational localism, we believe in hiring locally for each spoke office. This helps promote local talent and bring high-paying jobs back to the villages and towns where we are based.Equal opportunity
As part of our efforts to tackle inequality, Zoho Corporation Limited have made efforts to provide equal opportunities and tackle workforce inequality. All roles at Zoho Corporation are open to all people irrespective of gender, sex, race, ability, or religion. We hire solely based on skill and have a diverse team. We eschew discrimination on any grounds, including age, colour, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, and other unique characteristics that define our associates. Instead, we espouse, fairness, striving to ensure that a merit-based approach allows wage parity among associates with comparable experiences and responsibilities, irrespective of their gender. Our campus has been designed to be accessible to all, including differently- abled colleagues. The layout design includes ramps and lifts in every building, allowing ease of mobility and access to all. Apart from the usual shuttle facilities, special cab service covering a certain distance is given for women during their third trimester.Wellbeing
Zoho Corporation Limited adheres to industry standards in remuneration, ensuring that compensation is equitable across genders. Recognising the diverse needs of our people, we provide essential support such as parental leave, aligning with our efforts to build an organisation that values and cares for every individual. We have trained medical practitioners and a dedicated medical clinic available on all days of the week. Employees can freely avail their services. The Hazard Identification & Risk Assessment (HIRA) Framework is followed rigorously at the premises. We provide in-house counselling to our employees for free via our team of trained and qualified therapists. We organise free medical check-ups for our employees on an annual basis. We organise regular blood donation camps in association with various blood banks. We have open house sessions conducted by the CEO periodically where employees can raise any concerns. Day Care facilities provided for employees kids. The compliance monitoring framework involves ongoing reviews and enhancements of occupational health programmes, guided by feedback, data analysis, and emerging best practices.
Pricing
- Price
- £156 a licence a year
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
-
We offer an all-inclusive, free, 30-day trial for all users.
Once the trial period has lapsed, the product with all of its features will be free for 10 users only. - Link to free trial
- https://id360.manageengine.com/signup