Extic is an identity as a service (IDaaS) platform from EXGEN NETWORKS. It pairs SAML 2.0 single sign-on and MFA with identity management driven by HR records. The service runs in a Japanese cloud region under 24/7 monitoring and holds ISMS certification.

It includes an identity provider (IdP) for GakuNin, the academic authentication federation of Japanese universities and research institutions. Institutions can join GakuNin without running their own Shibboleth server.

Separate plans cover public bodies, educational institutions and GIGA School (K-12) deployments. Each plan can be bought for SSO, provisioning or both. A free trial is open to organizations, not individuals.

Attribute mapping turns HR data into sign-in and authorization attributes, and lifecycle rules set start, disable and deletion dates. Provisioning creates and updates accounts in cloud services such as Microsoft 365, Google Workspace and Slack. Other services connect over SCIM.

An AD aggregator syncs users from Active Directory. An on-premises agent writes accounts to Active Directory, LDAP directories and databases, and runs only on the Japanese edition of Windows Server.

Passkeys are a paid option and work with Windows Hello, Touch ID or security keys such as YubiKey. Authenticator-app TOTP codes and email one-time passwords are the other MFA methods.

Sign-in rules on source IP range, group and target application set MFA and access, except for users who sign in through an external IdP.

For web applications without SAML, the portal fills in each user’s stored ID and password.