Security incident on record - February 2022 - attacker accessed OneLogin database for approximately 3 months before detection
▪ Editorial verdict
OneLogin MFA covers standard enterprise MFA requirements at a price point below Duo and Microsoft Entra. The SmartFactor Authentication risk engine provides basic adaptive capability and the factor breadth covers the common enterprise use cases.
The February 2022 breach where an attacker had undetected access to production systems for three months, affecting the authentication infrastructure itself, is the central concern for buyers. OneLogin has made improvements since, but the incident track record is a material consideration for an identity platform.
The verdict: the breach history makes OneLogin difficult to recommend over alternatives with clean security records. Organisations evaluating mid-market MFA should compare Cisco Duo and JumpCloud as alternatives with comparable functionality and better security track records.
Last reviewed: September 2026
G2
4.4150 reviews
Gartner
4.4200 reviews
PeerSpot
7.970 reviews
Gartner MQ: Challenger (Access Management MQ)
MFA / Passwordless Authentication assessment
PROTECTIONAdequate
Phishing-resistant factors
3 / 5
FIDO2 and push authentication available. Scored 3 because the 2022 breach (3-month undetected access) suggests authentication control weaknesses that have since been addressed but create historical concern.
Sources: OneLogin breach disclosure February 2022, OneLogin documentation