Activate Anywhere Overview
Activate Anywhere is an integral component of the Activate Platform that enables secure external access, mobile optimization, and web-based self-service functions. It serves as a trusted boundary between external users or applications and the internal Activate environment.
Purpose and Capabilities
Activate Anywhere provides:
- Secure remote access to Activate from outside the corporate network
- Seamless mobile browser authentication through OAuth
- Secure external proxy for Activate APIs
- Internet-accessible password reset portal for remote users

Mobile Access and Authentication
While the Activate Portal supports both Integrated Windows Authentication (IWA) and OAuth-based authentication, IWA is not suitable for external or mobile access scenarios because it relies on internal domain connectivity.
To address this, Activate Anywhere acts as a secure OAuth boundary. Users authenticate through Anywhere, which handles OAuth token issuance and validation. Once authenticated, Anywhere securely proxies the user’s session to the internal Activate Web Site, maintaining single sign-on without reauthentication prompts.
This model provides strong security while allowing a smooth user experience from mobile browsers and external networks.
API Access
Activate Anywhere also functions as a secure gateway for Activate APIs, allowing controlled and authenticated access from external systems without exposing the internal Activate Web Server.
API access through Anywhere includes:
- OAuth-based authentication for external integrations
- Request proxying to internal Activate API endpoints
- End-to-end encryption using 256-bit AES transport security
- Audit visibility for external requests passing through the Anywhere layer
This design allows external systems — such as mobile apps, connectors, or third-party automation tools — to access Activate’s APIs safely while preserving the integrity of the internal environment.
Secure Password Reset
Activate Anywhere provides a secure, internet-facing password reset portal for users without corporate network access. Through this portal, users can:
- Reset or change passwords remotely
- Accept an Acceptable Use Policy (AUP)
- Configure password recovery questions
- Set an initial password during onboarding
This enables secure self-service for remote and hybrid workers while maintaining compliance with enterprise password policies.
Architecture Options
Activate Anywhere can be deployed in two main configurations:
Standalone Server
Pros
- Full isolation from the Activate environment
- Simplified perimeter and firewall management
Cons
- Requires a dedicated server and SSL certificate
- Slightly higher maintenance overhead
Side-by-Side Deployment
(Installed on the same server as Activate)
Pros
- Simplified setup and shared infrastructure
- Reduced certificate management effort
Cons
- Lower isolation between web and API layers
- Increased impact radius in case of failure