# Junify for shared team accounts: shared accounts aren't going away, so let people use them without the password

> Your admin adds each shared login to Junify. People verify on their own phone and click to sign in without ever seeing the password, and even a shared account shows who used it and when.

URL: https://www.junify.com/shared-accounts

People need only the Junify phone app and browser extension. Using Okta or Entra ID? See "Working with your identity provider" below for how Junify and your identity provider split the work.

## Is this how it works today?

Until now, letting someone use a shared account meant giving them the password. That's no longer true, but work often still looks like this.

- Department tools without single sign-on run on shared passwords
- Everyone knows the social profile, shared inbox, and vendor portal logins
- Each departure means a new shared password, sent to everyone who stays
- Shared logins don't record who used them, so audits can't get a name
- Two-step verification for a shared account depends on one person's phone
- Part-time staff without a company email use a shared login

What it costs: Anyone who knows the password can get in. A shared login can't show who used it. Cutting someone off means a new password for everyone.

## How it works: three steps

Before you start, an admin (usually IT) adds the shared logins to Junify and picks who can use each one (assigning). No one gets the password.

1. **Verify on your phone**: Scan the QR code on screen with the Junify app on your own phone. That verifies you. Signing in with Okta or Entra ID works too.
2. **Click a card to sign in**: Each account you may use appears as a card. Click it and the Junify extension opens the service and fills in the login, out of sight.
3. **Each use is recorded by person**: Everyone verifies first, so a shared login shows who used it. Optional recording is announced; only that person and admins can watch.

Each person sets up the phone app and the browser extension. Day to day, it's scan and click.

## What your company can do after Junify

How IT handles the days people join, people leave, and someone asks for records.

- **When someone leaves or changes roles**: Remove their cards and they can't sign in again. They never had the password, so there's nothing to change or resend.
- **When auditors ask who had access**: Export to CSV who used which account, and when, person by person. Shared logins too, since everyone verifies first.
- **When something goes wrong**: See who used it and, with recording, what they did. Report it the same day. Admins can close their Junify windows remotely.
- **When you add part-time staff**: Assign only the cards they need, without adding them to Okta or Entra ID. They verify by phone, even without a company email.

## What helps with your team's shared logins

- **Apps without single sign-on**: Apps without SAML can't use your identity provider's single sign-on. Any username-and-password service can go into Junify.
- **Two-step codes off one person's phone**: One phone holding the code locks everyone else out. Junify enters authenticator app codes, not text or email codes.
- **Employees via your identity provider, others by phone**: Employees sign in through your identity provider; others use the Junify app. Either way, each use is recorded by person.
- **Devices the company doesn't manage**: Unmanaged devices can keep passwords and history. Cards open in an incognito window; closing it leaves neither behind.

## Working with your identity provider

Keep Okta and Entra ID. Junify handles the accounts they leave out.

Apps with single sign-on, and each employee's own login, stay with your identity provider. Junify covers what's left: shared team logins like the company social profile.

What your identity provider keeps doing:

- Verifying employees and single sign-on to the apps that support it
- Adding and removing users in apps with automatic user sync (SCIM)
- Conditional access by device or location

What stays outside it, and Junify takes on:

- **Shared logins.** Okta SWA and Entra ID password-based SSO also fill these in and log access. After sign-in, Junify adds recording, upload alerts, download blocking, and remote window closing.
- **People who aren't in your identity provider.** Part-time and seasonal workers who don't get an account there verify on their own phone and get only the cards they need, with the same record per person.
- **Devices the company doesn't manage.** Junify controls only the browser window it opens, and leaves no password or browsing history on the device.
- **Several accounts in the same app.** Separate accounts for each team or line of work become separate cards, so nobody signs in to the wrong one.

How the two fit together:

- **Your identity provider verifies people.** Step 1, signing in to Junify, can go through your identity provider (SAML).
- **Users stay in sync.** Connect Microsoft Entra ID, Active Directory, or SCIM, so hires and departures carry over.
- **Everyone else verifies with the Junify app.** People outside your identity provider sign in from a QR code, even without a company email address.

If your identity provider can give everyone their own account and manage it, you don't need Junify.

## Frequently asked questions

1. **Should we stop sharing and give everyone their own account?** Where you can, do that first. Some accounts exist only once, like the company social profile or a shared inbox. Junify makes people verify before using those and records who used them.
2. **How is this different from Okta SWA or Entra ID password-based SSO?** Both can store a password and fill it in. The difference is after sign-in: Junify adds recording, upload alerts, download blocking, and remote window closing per account, and covers people outside your identity provider.
3. **We have single sign-on. Do we still need this?** Keep single sign-on. Put only the shared accounts it can't cover into Junify, and let your identity provider handle sign-in to Junify. Some customers moved just their shared accounts this way.
4. **How is this different from a password manager?** A password manager usually lets people reveal or copy the password, and once seen it can't be taken back. Junify fills it in without showing it. When someone changes roles, you remove their card.
5. **Is it safe to give Junify the passwords to our shared accounts?** Founded in 2016, Junify has served financial institutions and public companies in Japan. Our security program is aligned with the NIST Cybersecurity Framework, and we share security documents for reviews.
6. **Does it work on computers the company doesn't issue?** Yes. People need two things: the Junify app on their own phone and the Junify browser extension. Cards open in an incognito window, so closing it leaves no password or history on the computer.
7. **How much does it cost?** Each plan has a limit on the number of people, and any number up to it costs the same. Prices are fixed monthly amounts in USD. We'll give you the amount in the demo.

For admin consoles and admin logins, see cloud admin accounts: https://www.junify.com/privileged-access

## In one sentence

Verify people by phone, never show the password, keep a light record, work on any computer: all in one system.

## Company

Junify Corporation. Founded in 2016 in Palo Alto, California. Customers have included financial institutions and public companies in Japan. Security program aligned with the NIST Cybersecurity Framework; we share security and business continuity documents for reviews. Live system status at https://status.junify.com

## Next steps

Hand off the work without the password, and be able to say who used each account.

- Try the demo (about 5 minutes, no signup): https://www.junify.com/bpo/try?lang=en&scenario=shared-accounts
- Book a 30-minute demo: https://www.junify.com/bpo/demo
- Download the overview: https://www.junify.com/bpo/download
- Email: info@junify.com