{"id":"FR2518756614","name":"Managed Access Gateway with Managed Microsoft 365","provider":"Exostar","providerSlug":"exostar","status":"FedRAMP Ready","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Collaboration","Content Management System (CMS)","Cybersecurity & Risk Management","Data Management","Storage"],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":false,"website":"https://www.exostar.com/","description":"Exostar's Managed Access Gateway (MAG) with Managed M365 (MM365) service (“MAG + MM365”) is comprised of two main services with additional service add-ons detailed below:\r\n\r\n \r\n\r\nMAG is Exostar’s comprehensive portal solution for registration, account management, and authentication as a means of providing controlled access to Exostar hosted applications and applications located within other enterprise domains. MAG allows enterprises to enable controlled access to information and applications. A standard deployment approach ensures that a single sign-on (SSO) federation infrastructure can be seamlessly extended to support integration with Exostar. \r\n\r\nThe MAG solution provides the following capabilities:\r\n\r\nOrganization Registration Workflows, including:\r\nOrganization account established with administrative assignments.\r\n“Subscription” based access to the customer’s (Service Provider) application(s).\r\nUser Registration Workflows, including:\r\nUser account enrollment with role assignment.\r\nDelegated approval\r\nAccount attributes management (account lifecycle).\r\nProvisioning Workflows, including:\r\nProvisioning of new organization and user account attributes to Service Provider (applications).\r\nPropagation of organization and user account changes to Service Provider (account lifecycle).\r\n \r\n\r\nManaged M365 (MM365) provides customer with a Microsoft Office 365 GCC High Teams subscription hosting Teams, Exchange, SharePoint, and OneDrive, with Exostar performing the administrative and authentication controls. The customer retains control of their user lists, adding and removing personnel as needed, while Exostar handles security monitoring and common account monitoring duties. Exostar also provides the basic management and monitoring functions for the subscription. Customers may engage services for single-tenant or multi-tenant services.\r\n\r\n \r\n\r\nAdditional services customers may subscribe to:\r\n\r\n \r\n\r\nExostar Managed Secure Desktop (EMSD) - EMSD provides an in-boundary, pre-hardened virtual desktop instance to allow customers to view and work with federal customer data in a compliant manner. Customers may engage services for single-tenant or multi-tenant services.\r\n\r\n \r\n\r\nCustomers of MAG can review user guides, including guides for the Organization Administrator which outline the secure configuration of the system, here: https://www.myexostar.com/knowledge-base/mag-training-resources/","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Exostar%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2025-12-09","to":"FedRAMP Ready","certType":"Rev5"},{"date":"2026-10-22","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"trustCenterCheck":null}