BeyondTrust

BeyondTrust provides privileged access security across remote access, help desk support, and endpoint privilege management. Integrating BeyondTrust products with BlokSec replaces passwords and MFA prompts with cryptographic, phishing-resistant authentication — users approve sign-ins from the BlokSec mobile app.

How it works

BlokSec acts as a SAML 2.0 identity provider for BeyondTrust products. When a user initiates a sign-in, BeyondTrust redirects the authentication request to BlokSec. The user approves the request on their phone, and BlokSec issues a SAML assertion back to BeyondTrust that grants access.

Note

All three integrations use the SAML 2.0 protocol. The setup pattern is the same across products — create a SAML application in BlokSec, download the metadata, and configure BlokSec as an identity provider in the BeyondTrust product.

Supported products

Privileged Remote Access

Passwordless authentication for vendor and employee remote access sessions.

Remote Support

Passwordless authentication for IT help desk technicians and end users.

Endpoint Privilege Management

Enable zero-knowledge proofs to further complement the zero trust controls provided by BeyondTrust Endpoint Privilege Management for Windows and Mac

Prerequisites

Before setting up any BeyondTrust integration, make sure you have:

• A BlokSec admin account with permission to create SAML applications
• Administrator access to the relevant BeyondTrust product
• At least one user with the BlokSec authenticator app installed and their account provisioned in BlokSec