Exostar: Managed Access Gateway with Managed Microsoft 365
What its stage means
An independent assessor found the provider ready to pursue an authorization. It is not an authorization.
The provider's description
Exostar's Managed Access Gateway (MAG) with Managed M365 (MM365) service (“MAG + MM365”) is comprised of two main services with additional service add-ons detailed below:
MAG is Exostar’s comprehensive portal solution for registration, account management, and authentication as a means of providing controlled access to Exostar hosted applications and applications located within other enterprise domains. MAG allows enterprises to enable controlled access to information and applications. A standard deployment approach ensures that a single sign-on (SSO) federation infrastructure can be seamlessly extended to support integration with Exostar.
The MAG solution provides the following capabilities:
Organization Registration Workflows, including: Organization account established with administrative assignments. “Subscription” based access to the customer’s (Service Provider) application(s). User Registration Workflows, including: User account enrollment with role assignment. Delegated approval Account attributes management (account lifecycle). Provisioning Workflows, including: Provisioning of new organization and user account attributes to Service Provider (applications). Propagation of organization and user account changes to Service Provider (account lifecycle).
Managed M365 (MM365) provides customer with a Microsoft Office 365 GCC High Teams subscription hosting Teams, Exchange, SharePoint, and OneDrive, with Exostar performing the administrative and authentication controls. The customer retains control of their user lists, adding and removing personnel as needed, while Exostar handles security monitoring and common account monitoring duties. Exostar also provides the basic management and monitoring functions for the subscription. Customers may engage services for single-tenant or multi-tenant services.
Additional services customers may subscribe to:
Exostar Managed Secure Desktop (EMSD) - EMSD provides an in-boundary, pre-hardened virtual desktop instance to allow customers to view and work with federal customer data in a compliant manner. Customers may engage services for single-tenant or multi-tenant services.
Customers of MAG can review user guides, including guides for the Organization Administrator which outline the secure configuration of the system, here: https://www.myexostar.com/knowledge-base/mag-training-resources/
What FedXchange has recorded
No change since FedXchange began following it on April 14, 2026. Each change of stage, impact level, or number of authorizations appears here.