Contact Us

SafeNet Authentication Service

Fully Automated Authentication as-a-Service

SafeNet Authentication Service (SAS) delivers fully-automated, highly secure authentication-as-a service with flexible token options that are tailored to the unique needs of your organization, substantially reducing the total cost of operation.

  • Automates everything: To reduce overheads and maximise effectiveness
  • Protects everything: Networks, applications and cloud servicesBroad APIs
  • Protects everyone and provides choice: tokens, policies and customization
  • Easy migration: move from an existing solution whilst protecting the current investment
  • Saves money: on infrastructure and resource investments

Cybersecurity Excellence Award Winner

Cybersecurity Excellence Award Winner for Multi-Factor Authentication

Gemalto's SafeNet Authentication Service (SAS) has been awarded the 2016 Cybersecurity Excellence Award for best multi-factor authentication service. This award recognizes SAS as:

  • An industry leader for ranking highest for the last four years in Gartner’s Authentication Magic Quadrant.
  • Widely adopted, currently supporting more than 2 million users worldwide
  • An innovator: SAS was the first to market cloud-based multi-factor authentication solutions.

5 Star Review

SC Magazine 5 Star Rating

"[SafeNet] Authentication Service is built around a significant collection of automation workflows that allow administrators to manage thousands of users, even with limited administrator overhead. The company prides itself on its over 200 integrations leading it to claim - rightly so, we believe - that if it takes a username and password on a login screen they can add strong authentication to it."

— Peter Stephenson, SC Magazine

Platform Details:



Supported Virtual Machines

Vmware V-Sphere, Citrix Xen Server, Microsoft Hyper-V

Supported Private Cloud Environments

All management platforms associated with the virtual machine environments: Vmware V-Sphere, Citrix Xen Server, Microsoft Hyper-V

Supported Authentication Methods



Supported Authentication Methods

  • One-time passcodes (OTP)
  • Out-of-band (OOB) via push notification, SMS and email
  • Contextual authentication
  • Pattern-based authentication (GrIDsure)

Available Form Factors

  • Hardware tokens
  • Software tokens
  • Phone-as-a-token
SAS Support for Step-Up Authentication

Supports the use of RADIUS Return Attributes to aid integration with other network features in terms of permitting or denying access to certain groups, applications or networks.

Migration Support

Support for side-by-side authentication for the purpose of migration with third-party vendors, such as, RSA and Vasco, via RADIUS proxy.

Target System Integration:



IPsec & SSL VPNs

Supported via RADIUS, SAML  and Web Services/API. Major supported products include:

  • Check Point R75
  • Microsoft UAG SP1
  • Cisco ASA 5505
  • Citrix Netscaler VPX 10
  • Juniper SA 700
  • Nortel Avaya VPN Client 10.04
  • SonicWall SRA V6
  • F5 APM 11.3
  • Fortinet -Fortigate 60B
  • Barracuda
  • Cyberoam
  • Billion
  • Palo Alto GlobalProtect 4.1
  • WatchGuard Firebox XTM 505
  • NetMotion mobility 9.1

Hosted Virtual Desktops (HVDs; e.g. Citrix)

Supported via (1) RADIUS (2) SAML. Supported platforms include: Vmware Horizon View, Citrix XenApp, MS Office 365, MS Terminal Services

Corporate Webmail (e.g., OWA, GroupWise)

Supported via Proxy w/Agent, OWA specific Agent. Supported platforms include: Microsoft Webmail, Novell, Google Apps Mail

Outlook Anywhere

In addition to OWA agent, SAML w/ADFS based integration and Windows Login authentication integration is supported.

Web and Application Servers

Supported via (1) Agent /Filter (2) RADIUS (3) SAML (4) API/WebServices. Supported platforms include: IIS, Apache PHP

Web Access Management (WAM) or Federated SSO Products

Supported via SAML, Custom Agent. Supported platforms include: Symplified, OCTA

Microsoft Office 365

Supported via SAML via integration with Microsoft ADFS, X5.09 and RADIUS with UAG as a proxy, Exchange 2010 On-Premises OWA and Exchange 2010 Online (Office 365), with Forefront Universal Access gateway / Threat Management Gateway (UAG/TMG)

Cloud Apps (SaaS; e.g., Google Apps,

Supported via SAML. Supported platforms include: Google Apps, SFDC, Any application that supports SAML 2

ERP Products

Supported via (1) SAML (2) Agents (3) Custom integration via API/WebServices. Supported platforms include: SAP, Oracle, Siebel

Legacy Applications

Supported via Custom integration via SDK/API/WebServices

Platforms, Programming Environments and Languages

Java, C++, .net, - Supported platforms: Mac, Linux, Windows. Support for: Windows: GINA, Credential Provider; Linux: PAM Module

Directory Services

Supported via specific agent for AD domain login


Supported via RADIUS. Supported platforms include: Oracle, Any database that supports RADIUS authentication

WiFi Networks

Supported via RADIUS, SAML. Supported solutions include all Wifi solutions that support RADIUS and SAML


Supported via an IIS plug-in. UAG is not required.

Start a Free TrialDownload the Solution Brief

SafeNet Authentication Service Features

Cloud User Access Icon
Broad Coverage
  • Extensive APIs for authentication and administration, self-service, web services free with platform
  • Broad set of use cases
  • Vendor and form-factor agnostic

Extensive Automation
  • Reduces the time of provisioning, administration, and management of users and tokens

Flexibility to Support Enterprise Wide Deployment
  • 24x7 availability
  • No hardware requirements
  • Grows with your organization’s requirements

Multi-Tier/Multi-Tenant Environment
  • Easy to support different clients, regions and groups
  • Centrally managed policies

  • Complete definition and control of your users authentication journey
  • Multilingual support for user self-service, approval workflow and enrollment
  • Customize and brand the overall infrastructure and user experience so it is unique to the specific organization

SafeNet Authentication Service Benefits

Multi-Factor Authentication Purple Icon
Low Total Cost of Operation
  • Simple, low, per-user pricing model with no hidden or additional costs
  • Cloud platform, reduced helpdesk expenses, lowered management time by 90%
  • Large-scale automation, user provisioning, and user self-enrollment

Quick Cloud Migration
  • Smooth transition from an existing third party RADIUS authentication server
  • Maintain current token investment while immediately benefiting from lower operational costs
  • Automated processes significantly reduce administration and management overheads

Peace of Mind
  • Robustness, availability and protection, in a trusted cloud environment


How does it work?

With no infrastructure required, SafeNet Authentication Service enables a quick migration to a multi-tier and multi-tenant cloud environment, and protects everything, from cloud-based and on-premise applications, to networks, users and devices.

SafeNet Authentication Service - Protect Everything Diagram

4.75 Star Review

SC Magazine 4.75 Star Rating

"[SafeNet Authentication Service] is a cloud-based authentication service that enables enterprises to secure online assets. It generates a 4- to 16-character pin, which is unique to the user for authentication. To test the product we accessed every feature that the token had to offer: the basic token generation feature, the changing of an individual's pin, and challenging the pin. Each feature passed easily."

— Peter Stephenson, SC Magazine

Start a Free TrialDownload the Solution Brief

Back to Top

Contact Us

Thank you for your interest in our products. Please fill out and submit the form to receive more information about Gemalto or to be contacted by a Gemalto specialist.

Your Information

* Email Address:  
* First Name:  
* Last Name:  
* Company Name:  
* Phone:  
* Country:  
* State (US Only):  
* Province (Canada/Australia Only):  

By submitting this form I agree to receive information from Gemalto and its affiliates as described in our Privacy statement.