Junify
REC
How it works

How Junify signs people in without giving them the password

An admin adds each login to Junify. Team members confirm who they are on their phone and click an account, and Junify fills in the login for them. All they need is the Junify app and browser extension.

Using it

Three steps

Before you start, an admin adds each login to Junify and assigns it to the people who may use it. Team members never get the password.

Step 1

Verify on your phone

Scan the QR code on screen with the Junify app on your own phone. That scan is how Junify knows it's you. No email address needed.

Step 2

Click a card to sign in

Each account you may use appears as a card. Click it and Junify fills in the username and password. You never see them.

Step 3

Junify records who used it

That includes shared logins. Session recording is optional and announced first; only that person and admins can watch it.

You don't change any settings in the apps people sign in to. Setup is the app and the extension; day to day, it's scan and click.

For admins

What admins can do

Assign and remove

Choose who can use which account, card by card, and remove it the moment their work ends. There's no new password to send around.

A record for each person

Junify records who used which account, and when. You can export it to CSV.

Session recording

Turn it on only for accounts that need it. It saves screen changes, so files stay small and you can keep them longer. The person sees a notice first.

Control what leaves

Allow or block file downloads per account. Junify detects uploads and alerts the admin.

Two-step verification

For accounts that use authenticator-app codes, Junify enters the code too. Codes sent by text message or email are not supported.

IP restrictions and location

The service's own IP restrictions keep working, because people connect to the service directly from their own computer. You can also limit access by location.

Close windows remotely

An admin can sign someone out of Junify on the spot. Every window Junify opened on their computer closes, so those logins are gone from that computer.

HR systems and identity providers

Sync people from Entra ID, Active Directory, or any system that supports SCIM, so hires and departures carry over. Step 1 can also go through your identity provider.

Devices

What it needs on each device

Works on computers your company doesn't issue

Only the browser extension goes on the computer. Cards open in an incognito window, so closing it leaves no password or browsing history. IT doesn't need to manage it.

Works with username-and-password services

The service doesn't need single sign-on (one login that opens many apps). If it has a sign-in page, Junify works with it.

Working with your identity provider

Keep Okta or Entra ID.
Junify handles the accounts they leave out

Single sign-on apps and each employee's own login stay with your identity provider. Junify brings the same control to what's left: shared accounts, apps without single sign-on, and people who aren't in your identity provider.

What your identity provider keeps doing

  • Verifying employees and single sign-on to the apps that support it
  • Adding and removing users in apps with automatic user sync (SCIM)
  • Conditional access by device or location

What Junify covers outside it

  • Shared logins. Okta SWA and Entra ID password-based SSO also fill these in and log who opened them. After sign-in, Junify adds recording, upload alerts, download blocking, and remote window closing.
  • People who aren't in your identity provider. Part-time and seasonal workers who don't get an account there confirm who they are on their own phone and get only the cards they need. Junify records their use person by person, as it does for employees.
  • Devices your company doesn't manage. Junify controls only the browser window it opens, and leaves no password or browsing history on the device.
  • Several accounts in the same app. Separate accounts for each team or workflow become their own cards, so it's clear which one you're opening.

How the two fit together

  • Your identity provider can verify people. Step 1, signing in to Junify, can go through your identity provider (SAML).
  • Users stay in sync. Connect Microsoft Entra ID, Active Directory, or SCIM, so hires and departures carry over.
  • Everyone else verifies with the Junify app. People outside your identity provider sign in from a QR code, even without an email address.

If you can give everyone their own account and manage all of them through your identity provider, you don't need Junify. Junify is for the accounts that can't be handled that way.

Company

Junify Corporation

Founded in 2016 in Palo Alto, California
Customers have included financial institutions and public companies in Japan
Security program aligned with the NIST Cybersecurity Framework, with security and business continuity documents available for your vendor review
Live system status at status.junify.com

Read about the people who build Junify.

Junify

Hand off the work without handing over the password, and know who used each account

You can also email us at [email protected]