Does Workforce.com support Single-Sign on (SSO)?
Yes, if you support an OpenID compliant iDP - we have the technical capability to support SSO as a means of authentication for you. Workforce.com provides SSO integration via Auth0, a universal authentication platform.
By default, Workforce.com supports Google SSO
How are passwords stored?
Workforce.com enforces a password complexity standard and credentials are stored using a PBKDF function (bcrypt) with a salt. This makes sure that if we are breached, if two users have the same password, the stored hash will be different.
What is the Permission model for Workforce.com?
Workforce.com uses Role Based Access Controls to ensure customers can only view data they are authorized to view. A customer from Organization A cannot view data from Organization B, Workforce.com enforces logical tenant data separation. Similarly, a staff member is not authorized to view things (such as staff salary), when a manager can.