It's the real deal when it comes to passwordless login and the SSO experience is absolutely flawless. The management of permissions, users, and their provisioning, and management of computers and AD is so far flawless. Last but not least, the many redundant login vectors you can use, although felt overkill in the beginning, are absolutely needed since the further you use, the further you discover which way for login you prefer on your PC, browsers, apps, mobile, and the vast variety of ways is important in long term use. That personalized multiplicity of opened approches make the software use a breeze and adjust to your varying tastes. Last but not least, having the 2FA (google authenticator like) backed-up, and seamlessly available in the browser extension is a feature I discovered I just loved to use. It's 2FA securely done, backed-up and very easily available. Last but not least, THE OFFLINE MODE is an ABSOLUTE MUST HAVE, and a life saver when the internet is not available and you need to unlock your computer. That feature is notably missing of nearly all their competitors and a sinequanon condition to have in my view. I understand NASA, Boeing and VISA are some of their key customers and the thinking that went behind the resilience of the app and its holistic functioning clearly shows. The ability to clone profile and lock random recovery of accounts, or delay them for admin approvals are also well designed and deployed features in the fields of typical security and recovery hazards other providers sometime have (getting convenience of recovery ahead of a the must-have ability to totally lock-down the recovery of certain highly sensitive profiles of users such as super-admin.)

The 2FA portion works well but the admistration of accounts is difficult. The admin website is somewhat like a labryinth and there are multiple ways to do the same thing which makes the administration confusing.

The ability to run the 2FA app on 2 devices so if i reset a device i don't lose all access points