WALLIX Trustelem

What is WALLIX Trustelem?

An identity provider is the cybersecurity component that everything else ends up depending on: once applications trust it, its availability becomes their availability and its compromise becomes theirs. Where it runs and who operates it are therefore first-order questions, not procurement details.

WALLIX Trustelem is a European Identity-as-a-Service (IDaaS) platform - Single Sign-On, Multi-Factor Authentication, and Identity Federation in the cloud. European vendor with data in EU = GDPR compliance.

Main functions:

• SSO - single login to all applications
• MFA - multi-factor authentication
• Identity Federation - SAML 2.0, OpenID Connect
• Directory Sync - synchronization with AD/LDAP

What Problem Does It Solve?

flowchart LR
    subgraph Without SSO
        A[User] --> B[Password 1 - Email]
        A --> C[Password 2 - CRM]
        A --> D[Password 3 - ERP]
        A --> E[Password 4 - HR]
        B --> F[Password fatigue]
        F --> G[Weak passwords / post-it]
    end

    subgraph With Trustelem
        H[User] --> I[SSO + MFA]
        I --> J[Email]
        I --> K[CRM]
        I --> L[ERP]
        I --> M[HR]
    end

    style A fill:#6366f1,stroke:#4f46e5,color:#fff
    style F fill:#dc2626,stroke:#b91c1c,color:#fff
    style G fill:#dc2626,stroke:#b91c1c,color:#fff
    style H fill:#6366f1,stroke:#4f46e5,color:#fff
    style I fill:#22c55e,stroke:#16a34a,color:#fff

Common problems:

• Users have dozens of passwords
• Password fatigue = weak passwords or post-it notes
• No MFA for SaaS applications
• Each application = separate user management
• US-based IDaaS vs European regulations (GDPR)

How Does Trustelem Work?

flowchart TD
    A[User] --> B[Trustelem Portal]

    B --> C[Authentication]
    C --> D[Username/Password]
    C --> E[MFA - TOTP/Push/SMS]
    C --> F[Passwordless - FIDO2]

    B --> G[SSO Federation]
    G --> H[SAML 2.0 Apps]
    G --> I[OIDC Apps]
    G --> J[On-prem Apps]

    K[Active Directory] --> L[Directory Sync]
    L --> B

    style A fill:#6366f1,stroke:#4f46e5,color:#fff
    style B fill:#f59e0b,stroke:#d97706,color:#fff
    style C fill:#8b5cf6,stroke:#7c3aed,color:#fff
    style G fill:#22c55e,stroke:#16a34a,color:#fff

Key Features

Supported Applications

Category	Examples
Microsoft	Office 365, Azure, Dynamics
Google	Workspace, Cloud Platform
Salesforce	Sales Cloud, Service Cloud
HR	Workday, SAP SuccessFactors
Collaboration	Slack, Zoom, Teams
Dev tools	GitHub, GitLab, Jira, Confluence
Custom apps	SAML 2.0, OIDC

Who Is It For?

Trustelem vs Competition

Aspect	WALLIX Trustelem	Okta	Azure AD
Origin	Europe (France)	USA	USA
Data residency	EU only	Global (US primary)	Global
GDPR native	Yes	Requires configuration	Depends on tenant
PAM integration	Native (Bastion)	Via SCIM	Via SCIM
Pricing	Per-user, competitive	Per-user, premium	Part of M365
App catalog	1000+	7000+	3000+

WALLIX Trustelem advantages:

• European vendor = data never leaves EU
• Native integration with WALLIX Bastion (PAM + IAM in one)
• Simpler deployment for mid-market
• Competitive pricing vs Okta

Specifications

Parameter	Value
Deployment	SaaS (European cloud)
Protocols	SAML 2.0, OpenID Connect, OAuth 2.0
MFA methods	TOTP, Push, SMS, FIDO2
Directory	AD, LDAP, Azure AD, Google Directory
API	REST API for provisioning
SLA	99.9% uptime

FAQ

How does it differ from Azure AD? Azure AD is part of Microsoft ecosystem. Trustelem is independent European IDaaS. For organizations with multi-vendor environment or GDPR requirements - Trustelem may be a better choice.

Can I use it with WALLIX Bastion? Yes. Trustelem + Bastion = complete IAM + PAM solution. Users log in through Trustelem SSO, admins additionally through Bastion with session recording.

What MFA methods are available? TOTP (authenticator app), Push notifications, SMS, Email OTP, FIDO2/WebAuthn (passwordless).

How many apps are in the catalog? 1000+ pre-built connectors. For apps without connector - custom SAML/OIDC setup possible.

Does nFlo deploy Trustelem? Yes. SSO deployments, MFA configuration, AD integration, SaaS app onboarding. Often combined with WALLIX Bastion.