Password Synchronization Technology
May 1, 2010Business Issues
Passwords are a reality and are here to stay
Increased security risks in large enterprises
A need to effectively manage user identities in increasingly complex environment
The larger the enterprise, the greater support that is needed
Help desks are required to support more complex enterprises with the same or fewer resources
The need to reduce costs is inherent in complex enterprises
What is Password Synchronization
“Password Synchronization is an enterprise security solution that provides the ability to securely synchronize and manage user identity activities across a wide spectrum of operating systems, platforms and applications”
Leveraging Password Synchronization
Security concerns stem from risks surrounding multiple passwords
UserID/Password automation reduces need for users to manage multiple passwords
Strong password policies are required to reduce security risks
Password Synchronization Requirements
Support for multiple platforms
Centralized administration, password policy and audit
Simple deployment with minimal related costs
Synchronization of other access control events (such as user suspends, revokes, resumes and deletes)
Secure, cost-effective and scalable
Password Synchronization Benefits
One password per user (less to remember, less to forget)
Reduced help desk and IT support costs
Greater security (no need to write down passwords)
Increased productivity
Self-Serve Password Reset Benefits
Reduced help desk and IT support
Greater security through user self-administration of password resets
Ability to provide password reset transparently across multiple platforms
A wide range of challenge response features
Rich customization
Benefits to the Help Desk
Password synchronization reduces the number of user passwords
“Fewer passwords for the user means fewer passwords to forget,
and fewer calls to the help desk”Self-service allows users to maintain their own password without placing a help desk call
Self-service interface with Help Desk systems automates creation of trouble tickets
Solution Components
Enterprise password infrastructure solutions can be
provided through a number of components:
Password Synchronization
Self-Service
Delegated Administration
Workflow and notification
Mechanisms that manage and automate user ID states
(e.g. Enable, Disable, Lock-out, Unlock, etc.)
Technology Evolution
Security Organizations are no longer willing to tolerate disparate “Islands” of security
Password Synchronization and password reset product technologies have merged into a common infrastructure
These products are evolving towards complete credential management
They are moving towards managing credentials at all levels (Enterprise, B2B, B2C, ASP, etc)
www.bestitdocuments.com