Skip to main content

Admins

🏢 Create your organization​

To get started with XFA, you need to create an organization. Follow these steps to create your XFA account and set up your organization for secure device management and compliance.

🔍 Phase 1: Discover your devices​

🔗 Connect XFA to your identity provider​

Learn how to set up XFA for your identity provider:

✉️ Phase 2: Boost security awareness​

Give your team the tools to stay vigilant about device security. XFA lets you send automated reminders and verification requests as needed.

You'll be able to:

  • Send automated reminders and verification requests to your team.
  • Access weekly reports for a clear view of your company's security posture.
  • Act proactively by identifying and addressing potential security risks.

Setting Up Awareness​

To get started with Awareness, follow these steps:

  1. Define the scope: Choose which devices and groups will receive emails.
  2. Configure verification email reminders: When a user's device is discovered and not yet verified, they will receive an email with detailed information about the device, along with a request to verify their device.
  3. Configure risk email reminders: When a user's device is found to be at risk according to the set policy, they will receive an email with details about the risks identified, as well as instructions on how to resolve the issues.
  4. Monitor and adjust: Keep an eye on the weekly reports and adjust your settings as needed.

💪 Phase 3: Enforce device security​

Ensure only secure devices access your business platforms. With a quick setup, XFA checks key security settings like auto-updates and encryption.

XFA supports integration with the following identity providers:

By linking your IDP to XFA, you can enforce device compliance during authentication.

Configuring Enforcement Integrations​

Configure on an application​

You can also configure enforcement for specific applications. XFA supports the following integrations:

Custom SAML Integrations​

For applications not listed above, XFA supports custom SAML integrations. This allows you to enforce device security on any SAML-enabled application. XFA also supports OAuth2 integrations & custom integrations using a javascript library.

Google Workspace Google ​

Google Workspace can also be linked to XFA via a SAML integration to enforce device compliance.

🔐 Silent MFA​

XFA’s Silent MFA feature provides an additional layer of security by requiring multi-factor authentication without interrupting the user experience. Silent MFA can be enabled on a per-integration or per-application basis, ensuring secure access to your systems without unnecessary friction for users.

Next steps​

Learn more about XFA's security checks and reports.

📩 Manually invite users

XFA makes it easy to invite users to share their device status with your company.

✅ Available Security Checks

Create and manage device security policies to enforce specific security rules for your organization’s devices.

🖥️ Devices

Once enrolled and registered, XFA provides administrators with detailed insight into the state of a device and its properties.