---
title: Activate Anywhere Overview
slug: activate-anywhere-overview
createdAt: 2025-07-17T01:22:40.182Z
---

#

Activate Anywhere is an integral component of the **Activate Platform** that enables secure external access, mobile optimization, and web-based self-service functions. It serves as a trusted boundary between external users or applications and the internal Activate environment.

## Purpose and Capabilities

Activate Anywhere provides:

- **Secure remote access** to Activate from outside the corporate network 
- **Seamless mobile browser authentication** through OAuth 
- **Secure external proxy for Activate APIs** 
- **Internet-accessible password reset portal** for remote users 



![](https://api.archbee.com/api/optimize/Lfto9rn2ELed8aLNOgwlJ/2v4UIezj5zwzZggx7z0XB_image.png)

## Mobile Access and Authentication

While the **Activate Portal** supports both **Integrated Windows Authentication (IWA)** and **OAuth-based authentication**, IWA is not suitable for external or mobile access scenarios because it relies on internal domain connectivity.

To address this, **Activate Anywhere** acts as a **secure OAuth boundary**. Users authenticate through Anywhere, which handles OAuth token issuance and validation. Once authenticated, Anywhere securely proxies the user’s session to the internal Activate Web Site, maintaining single sign-on without reauthentication prompts.

This model provides strong security while allowing a smooth user experience from mobile browsers and external networks.

## API Access

Activate Anywhere also functions as a **secure gateway for Activate APIs**, allowing controlled and authenticated access from external systems without exposing the internal Activate Web Server.

API access through Anywhere includes:

- **OAuth-based authentication** for external integrations 
- **Request proxying** to internal Activate API endpoints 
- **End-to-end encryption** using 256-bit AES transport security 
- **Audit visibility** for external requests passing through the Anywhere layer 

This design allows external systems — such as mobile apps, connectors, or third-party automation tools — to access Activate’s APIs safely while preserving the integrity of the internal environment.

## Secure Password Reset

Activate Anywhere provides a **secure, internet-facing password reset portal** for users without corporate network access.
 Through this portal, users can:

- Reset or change passwords remotely 
- Accept an **Acceptable Use Policy (AUP)** 
- Configure password recovery questions 
- Set an initial password during onboarding 

This enables secure self-service for remote and hybrid workers while maintaining compliance with enterprise password policies.

## Architecture Options

Activate Anywhere can be deployed in two main configurations:

### Standalone Server

**Pros**

- Full isolation from the Activate environment 
- Simplified perimeter and firewall management 

**Cons**

- Requires a dedicated server and SSL certificate 
- Slightly higher maintenance overhead 

### Side-by-Side Deployment

(Installed on the same server as Activate)

**Pros**

- Simplified setup and shared infrastructure 
- Reduced certificate management effort 

**Cons**

- Lower isolation between web and API layers 
- Increased impact radius in case of failure