OneLogin

OneLogin, Inc. is a cloud-based identity and access management (IAM) provider that designs, develops, and sells a unified access management (UAM) platform to enterprise-level businesses and organizations. Founded in 2009 by brothers Thomas Pedersen and Christian Pedersen, OneLogin is a late stage venture, privately held company.
OneLogin was named a leader in the Gartner Magic Quadrant for Access Management in 2020. The OneLogin UAM platform is an identity management system that uses single sign-on (SSO) and a cloud directory to enable organizations to manage user access to on-premises and cloud applications. The platform also includes user provisioning, lifecycle management, and multi-factor authentication (MFA).
OneLogin is based in San Francisco with additional offices in Redmond, Washington, and Atlanta, Georgia. OneLogin also has global locations in Dublin, Ireland, London, England, and Guadalajara, Mexico. The company hosts an annual Connect user conference.
History.
OneLogin was founded in 2009 in San Francisco by Thomas and Christian Pedersen. The brothers were involved with the on-demand help desk application, Zendesk, before launching OneLogin. Through their interactions with Zendesk customers, the founders realized that companies were encountering security and productivity challenges moving into the cloud. They came up with the idea of building an identity and access management solution that was secure and easy to use. 
OneLogin officially launched in 2010 with a seed round of funding and a $4.7M Series A round. 
From 2013 through 2017, the company raised an additional $48M, with an additional $22.5M raised in 2018. 
In August 2017, OneLogin appointed Brad Brooks as Chief Executive Officer, succeeding co-founder Thomas Pederson.
In 2018, OneLogin welcomed Courtney Harrison as Chief Human Resources Officer and expanded into the Asia-Pacific regions. 
n 2019, OneLogin made several significant hires to its executive leadership team including appointing Rick Barr as Chief Operating Officer, Dayna Rothman as Chief Marketing Officer, and Vanessa Pegueros as Chief Trust & Security Officer.
In November 2020, OneLogin was recognized as a Leader in Gartner’s Magic Quadrant for Access Management. Later, in December, Damon Dean joined as OneLogin’s Chief Product Officer and Matt Hurley was promoted from VP of Global Channels, Strategic Alliances, and Professional Services to Chief Revenue Officer.
Products.
OneLogin's Unified Access Management Platform includes:
Customers.
OneLogin is deployed by over 5500 companies worldwide, from high-growth tech companies like Uber, Evernote, and Stitch Fix to well-established global multinationals, such as Airbus, Virgin Hyperloop, Royal Mail Group, Herman Miller, Tesco, and Japan Airlines.
Funding.
OneLogin is backed by the venture firms Charles River Ventures, The Social Capital, Scale Venture Partners, Greenspring Associates, Blue Cloud Ventures, and Silver Lake Waterman. Its venture funding includes:
Availability.
OneLogin runs in multiple Amazon Web Services (AWS) datacenters in the US, as well as in AWS Dublin and AWS Frankfurt.
Security.
In August 2016, OneLogin reported that "an unauthorised user gained access to one of our standalone systems, which we use for log storage and analytics." The single user accessed the service for a month or more, and may have been able to see Secure Notes unencrypted. To remediate, OneLogin fixed the cleartext logging bug, locked down access to the log management system, and reset passwords.
OneLogin remained available and performant during the October 2016 attack on Dyn, a major provider of DNS services, which brought down many websites, including Spotify, Twitter, Reddit, and The New York Times, in part by using redundant DNS providers.
On May 31, 2017, OneLogin detected and stopped unauthorized access in their US data region. According to a OneLogin blog post on the breach, "a threat actor used one of our AWS keys to gain access to our AWS platform via an API from an intermediate host with another, smaller service provider in the US."
OneLogin staff detected the intrusion in seven hours, faster than Cisco's estimated industry average of 100–200 days to detect a breach and FireEye's 146 days to detect a breach, and slightly faster than Cisco's best median TTD of nine hours to discover security issues. OneLogin staff stopped the intrusion within minutes, significantly faster than the industry average of 100–120 days to remediate existing vulnerabilities.