Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

One Identity: Credential Protection in OneLogin SmartFactor

One Identity
10/09/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


There are six components that make up OneLogin Smart Factor authentication. In this video, we'll be taking a look at the credential protection functionality provided by Smart Factor. First, the Dynamic Password Blocklist can be configured to prevent users from using user directory attributes in their passwords. This helps organizations easily enhance their security posture by preventing the usage of weak or easily guessed credentials. For example, in the security policy here, the usage of first name, last name, and company name in a user's password are restricted. In fact, any user attribute can be added to the Dynamic Password Blocklist, even custom user attributes. Additionally, the Compromise Credential Check feature allows organizations to prevent users from setting their passwords to passwords that are already exposed from a previous data breach and available on the dark web. When a user creates a new account or changes their account password, the Compromise Credential Check feature compares their new username and password against a dynamic and continuously updated database of credentials that have been breached and posted on the dark web, and then prevents them from using any of these credentials identified as compromised. And that concludes this quick summary of the credential protection functionality provided by OneLogin Smart Factor authentication. Thanks for watching. If you haven't already, make sure to explore the rest of the demos in this video series to understand the other components that form OneLogin Smart Factor authentication.

TL;DR

  • OneLogin SmartFactor includes Dynamic Password Blocklist functionality that prevents users from using directory attributes (first name, last name, company name, or custom attributes) in their passwords.
  • The Compromised Credential Check feature validates new passwords against a continuously updated database of breached credentials from the dark web, blocking compromised passwords at creation or change.
  • These credential protection features are two of six components that comprise OneLogin's SmartFactor authentication framework, designed to prevent weak or exposed credentials.

Summary

This demonstration showcases two credential protection features within OneLogin's SmartFactor authentication framework: Dynamic Password Blocklist and Compromised Credential Check. The Dynamic Password Blocklist prevents users from incorporating directory attributes like first name, last name, or company name into their passwords, with support for custom user attributes as well. The Compromised Credential Check feature validates new passwords against a continuously updated database of credentials exposed in data breaches and available on the dark web, blocking users from setting passwords that have been previously compromised. Together, these features help organizations strengthen their security posture by preventing weak or exposed credentials at the point of password creation or change.

Chapters

0:00 - Introduction to Credential Protection
0:17 - Dynamic Password Blocklist
0:47 - Compromised Credential Check
1:18 - Conclusion and Series Overview

Key Quotes

0:17 "First, the Dynamic Password Blocklist can be configured to prevent users from using user directory attributes in their passwords."
0:47 "Additionally, the Compromise Credential Check feature allows organizations to prevent users from setting their passwords to passwords that are already exposed from a previous data breach and available on the dark web."
0:59 "When a user creates a new account or changes their account password, the Compromise Credential Check feature compares their new username and password against a dynamic and continuously updated database of credentials that have been breached and posted on the dark web."

FAQ

What user attributes can be blocked from passwords using OneLogin's Dynamic Password Blocklist?

Any user directory attribute can be added to the Dynamic Password Blocklist, including standard attributes like first name, last name, and company name, as well as custom user attributes specific to your organization.

When does the Compromised Credential Check validate passwords?

The Compromised Credential Check validates passwords when users create new accounts or change their existing account passwords, comparing the credentials against a continuously updated database of breached credentials from the dark web.


Categories:
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Identity & Access
  • Demo
  • Getting Started
  • Security Operations
  • Password Security
  • Credential Protection
  • Multi-Factor Authentication
  • Identity and Access Management
  • Data Breach Prevention
  • Dark Web Monitoring
  • User Authentication
  • Security Policy Configuration
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: One Identity: Credential Protection in OneLogin SmartFactor

              XStreaminars (watch here)

              • Oct
                28

                EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                10/28/202601:00 PM ET
                More events

                Industry Events (Sponsor Hosted)

                • Oct
                  13

                  Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

                  10/13/202601:00 PM ET
                  • Oct
                    15

                    Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

                    10/15/202611:00 AM ET
                    • Oct
                      20

                      Harnessing Data Governance for AI with Cyera and Snowflake

                      10/20/202611:00 AM ET
                      • Oct
                        27

                        Maximize Security, Value, and Returns on Your Microsoft Investment

                        10/27/202611:00 AM ET
                        • Oct
                          27

                          The HUMAN Experience: Real-Time Insights into Page Intelligence

                          10/27/202601:00 PM ET
                          More events

                          Upcoming Webinar Calendar

                          • 10/13/2026
                            01:00 PM
                            10/13/2026
                            Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance
                            https://www.truthinit.com/index.php/channel/2159/transitioning-from-cjis-to-ferpa-essential-audit-evidence-for-compliance/
                          • 10/15/2026
                            11:00 AM
                            10/15/2026
                            Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation
                            https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
                          • 10/20/2026
                            11:00 AM
                            10/20/2026
                            Harnessing Data Governance for AI with Cyera and Snowflake
                            https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
                          • 10/27/2026
                            11:00 AM
                            10/27/2026
                            Maximize Security, Value, and Returns on Your Microsoft Investment
                            https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
                          • 10/27/2026
                            01:00 PM
                            10/27/2026
                            The HUMAN Experience: Real-Time Insights into Page Intelligence
                            https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                          • 10/28/2026
                            01:00 AM
                            10/28/2026
                            [APAC:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2125/apac-ensuring-comprehensive-security-for-ai-applications/
                          • 10/28/2026
                            06:00 AM
                            10/28/2026
                            [EMEA:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2127/emea-ensuring-ai-security-across-all-platforms/
                          • 10/28/2026
                            01:00 PM
                            10/28/2026
                            [AMERICAS:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-strategies-and-insights/
                          • 10/28/2026
                            01:00 PM
                            10/28/2026
                            EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                            https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                          • 11/04/2026
                            11:00 AM
                            11/04/2026
                            Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape
                            https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
                          • 11/04/2026
                            11:00 AM
                            11/04/2026
                            Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                            https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                          • 11/05/2026
                            02:00 PM
                            11/05/2026
                            HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI
                            https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
                          • 11/05/2026
                            02:00 PM
                            11/05/2026
                            Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                            https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            360View: Govern, Secure & Recover Your Microsoft 365 Environment
                            https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                          Truth in IT
                          • Sponsor
                          • About Us
                          • Terms of Service
                          • Privacy Policy
                          • Contact Us
                          • Preference Management
                          Desktop version
                          Standard version