Hexiosec ASM provides SSO (Single Sign-On) integrations to allow you to access the application using your own accounts, using the OpenID connect (OIDC) protocol to communicate with SSO providers and verify user identities.

Hexiosec ASM officially supports the following SSO providers:

If you are an Enterprise customer and would like to enable SSO for your Hexiosec ASM account, please contact support.

If you are using an SSO provider not listed above, please still get in touch and we can support you in enabling SSO.

OIDC is an extension of open authorisation (OAuth) 2.0. More details on OIDC can be found in this Microsoft guide.

What Is OpenID Connect (OIDC)? | Microsoft Security

What version is Hexiosec ASM?

Which SSO protocols does ASM support?

EPSS

MSP Specific Guidance

Hexiosec ASM

Hexiosec ASM (Public)

Organisation and Group Roles

Using Groups

MFA and session expiry

Password Policy

Changing email address

Changing ownership

User and Group Management

Scan Types

Scan Allowances

Seeds and IPs

Scan Limiting

Deleting Scans

Scan Notifications

Managing Scans

Report Terminology

Scan Reports

Health Scores

Managing Actions

EPSS Scoring of Risks

TLS Certificate Risks

Backport Resolvable Risks

Risk Severity Ratings

SPF Hard Fail risks

Managing Risks

Managing Domains and IPs

Graph view

Managing CDNs and Shared IPs

Creating a scan using the API

Paginating the API Requests

Using the Public API

Hexiosec ASM mobile

Upgrade Recommendations

Contacting Support

User Guides

I've changed the device I use for MFA

I've accepted an invite, why can't I see anything?

I don't think this vulnerability applies to me?

Why has my scan not updated after I've made a fix?

Why is my IP's geographic location not showing, or incorrect?

Will Hexiosec ASM find Malware?

What are primary and secondary assets?

What is a Stale domain?

Can I run scans without permission?

What happens when I delete a scan?

Will the latest CVE be found?

FAQs