Hexnode debuts device-aware IdP to fuse identity & UEM

Hexnode has launched Hexnode IdP, a native identity provider that sits alongside its unified endpoint management (UEM) product and uses device compliance signals to control access.

The product adds an identity layer within the Hexnode platform. It combines single sign-on and multi-factor authentication with policies that check device status before allowing users to log in. Hexnode positions the release as part of a shift towards tighter integration between identity controls and endpoint security management.

Hexnode is the enterprise software division of Mitsogo. The IdP launch follows the recent introduction of Hexnode XDR, which broadened its security portfolio. The company argues that identity and endpoint intelligence should operate as one system rather than as separate tools.

Device-aware access

Hexnode IdP integrates directly with Hexnode UEM, enabling access rules that use its Device Trust Engine. The approach checks device posture in real time and applies conditional access decisions based on whether a device meets compliance requirements.

Hexnode says the integration reduces reliance on third-party identity licences for core access control. It frames the IdP as a way to keep authentication, device management, and access policy enforcement in one place.

Access controls combine user identity with device compliance status. Devices that are not enrolled in Hexnode UEM, or that fail compliance checks, can be blocked from logging in. The system also supports continuous verification of device posture, revoking access if risk conditions change after a session starts.

The controls target organisations that want a tighter link between endpoint policy and identity decisions. In practice, they tie access to a device's state-such as whether it is managed, compliant, or encrypted-rather than relying only on a user's credentials.

"The future of enterprise security lies in converging identity and device intelligence into a single, cohesive control plane," said Apu Pavithran, CEO and Founder, Hexnode. "Access can't be treated as a one-time event-it must be continuously validated against evolving risk signals. Hexnode IdP reflects our commitment to unifying identity, endpoint management, and security into an integrated architecture that helps organizations operate with greater confidence and control in a rapidly changing threat landscape."

Authentication features

Hexnode IdP includes single sign-on and multi-factor authentication across users, devices, and applications. The service centralises login and authentication through a single identity layer, and links access decisions to device compliance. Rules can block login attempts from endpoints flagged as non-compliant.

For organisations that already use cloud identity platforms, Hexnode IdP includes federated identity features. Hexnode says it syncs with Microsoft Entra ID, Google Workspace, and other directory services, allowing customers to keep existing directories while shifting some access enforcement and governance into Hexnode.

Governance controls

The release includes identity governance and administration functions such as lifecycle management and provisioning. Hexnode says it supports automated provisioning and group provisioning to applications, linking user accounts and access rights to changes such as joining a team, moving roles, or leaving the business.

The IdP also provides role-based access control for administrative permissions, supporting least-privilege assignment across IT and security teams that manage endpoints, users, and policies. Hexnode says the product includes reporting to help administrators monitor access patterns.

Beyond compliance checks, integration with Hexnode UEM extends to device-level security controls. Hexnode says it can block rooted or jailbroken devices, as well as devices that are not encrypted, connecting endpoint risk factors with identity-based access decisions.

Product roadmap

Hexnode plans to add adaptive access controls, just-in-time provisioning, and risk analysis. The updates would expand how access decisions change based on context and how accounts and access are issued on demand.