A Befree Global company

Identity and access

One secure sign-in for every app your team uses.

BeSecure is the single sign-on and access layer for your organisation. Connect the directory you already run, publish your applications once and give every employee one launchpad, while IT keeps a complete record of who accessed what.

01Security

Access sprawl is a security problem before it is an IT problem

Passwords everywhere

Every new tool means another password to reuse, write down or reset.

Onboarding takes days

A new starter needs a dozen accounts by hand, and a leaver needs the same dozen closed.

Nobody can answer who has access

When an auditor asks, the answer is assembled from memory and spreadsheets.

Shadow access accumulates

Accounts outlive projects and contractors keep logins. Nothing forces a review.

02BeSecure

Everything you need to run access properly

Single sign-on

BeSecure acts as the identity provider for your applications.

Directory integration

Your existing directory stays the source of truth.

User lifecycle management

Automate access from onboarding through role changes and offboarding.

Users, roles and structure

Model the organisation once and assign access against it.

Authentication controls

Tighten sign-in without writing your own auth.

Adaptive access policies

Apply extra control when the sign-in context looks different.

03By the numbers

At a glance

3protocols: SAML 2.0, OIDC and OAuth 2.0, plus a browser extension
2directories: Microsoft Entra ID and LDAP, synced on your schedule
3second factors: authenticator app, emailed code or security questions
1audit trail for every application launch and admin change

04BeSecure

Built to be the most trusted door in your business

Two-factor authentication

By authenticator app, emailed one-time code or security questions, with enrolment you can enforce.

Password policy and lockout

Set per organisation, with automatic lockout.

IP and geography limits

Restrict sign-in by IP address or location.

Complete audit log

Sign-ins and administrative changes, exportable for review.

Time-boxed support access

No shared admin credentials; elevated help expires.

Rate limiting

Applied to authentication endpoints.

05BeSecure

Connect the applications you already run

Apps that speak SAML, OIDC or OAuth federate directly. The rest are reached through the BeSecure browser extension.

  • Google Workspace
  • Microsoft 365
  • Gmail
  • Google Meet
  • Google Drive
  • Google Calendar
  • Google Docs, Sheets and Slides
  • YouTube

Essential Eight, described honestly

An access product can speak to two of the eight strategies: multi-factor authentication and restricting administrative privileges. BeSecure does not currently offer phishing-resistant methods such as passkeys or hardware security keys, so if your assessment needs them, tell us early.

FAQ

Frequently asked questions

Short answers to common questions.

Still have a question?

Talk to a specialist. We reply within one business day.

Ask us a questionor call 1300 873 733
We already pay for Microsoft Entra ID. Why add BeSecure?

BeSecure connects to Entra rather than replacing it. It adds coverage for applications that support no federation, one launcher, role-based assignment and a single audit trail across everything.

What about applications with no single sign-on?

They are reached through the BeSecure browser extension, from the same launcher as everything else, and access is granted and withdrawn by the same roles and groups.

Which directories can it sync from?

Microsoft Entra ID and LDAP, automatically or on demand, with the connection tested before you commit.

What happens when someone leaves?

You remove their access once in BeSecure and every published application goes with them. The removal is recorded so you can evidence it.

Is multi-factor authentication included?

Yes. People enrol an authenticator app, an emailed code or security questions, and an administrator can require enrolment.

Can we sign up online and try it?

No, by design. BeSecure is provisioned per organisation so the directory and access model are right from the start. Tell us about your organisation and we will arrange it.

Compliance

Your data, handled properly

Befree is ISO 27001 certified and GDPR compliant. We handle personal information under the Privacy Act 1988 and the Australian Privacy Principles, and under UK GDPR for UK clients. Sensitive fields, such as tax file numbers, are masked before they reach any AI model. Every AI workflow keeps a person reviewing decisions that touch a ledger, a client or a lending outcome.

How we protect your data

Next step

One sign-in for every app your team uses.

We set your organisation up, connect your directory and invite your first administrator.

  • 30-minute demo
  • With your own data
  • Reply within one business day