CA Federation Manager

Transcription

1 PRODUCT BRIEF: CA FEDERATION MANAGER CA FEDERATION MANAGER PROVIDES STANDARDS-BASED IDENTITY FEDERATION CAPABILITIES THAT ENABLE THE USERS OF ONE ORGANIZATION TO EASILY AND SECURELY ACCESS THE DATA AND APPLICATIONS OF OTHER ORGANIZATIONS AND CLOUD SERVICES. THIS IS DONE WITHOUT THE NEED FOR REDUNDANT USER STORES OR USER ADMINISTRATION PROCESSES. CA FEDERATION MANAGER GIVES YOUR ORGANIZATION THE ABILITY TO ACT AS AN IDENTITY PROVIDER (HOME SITE OF THE USER), A SERVICE PROVIDER (OWNER OF THE TARGET APPLICATION), OR BOTH, THUS SECURELY CONNECTING ORGANIZATIONS THAT ARE PART OF THE SAME ECOSYSTEM. Overview Benefits The CA Advantage Your customers, partners and employees expect easy access to your critical applications, information and services anywhere and at any time. The rapid growth of Web-based application outsourcing, Software as a Service (SaaS), cloud services and other IT-enabled business-to-business partnerships challenges this. A new set of security management challenges arises when attempting to manage security across organizational boundaries. is specifically designed to address these new security challenges. provides you with secure Internet single sign-on for your external partners, cloud service providers and internal business units. enables you to quickly federate Web applications and portals to: More quickly leverage partner-dependent business opportunities Improve the user experience through single sign-on (SSO) Reduce development and administrative costs Improve application security and control of external applications Ease the regulatory compliance burden offers you a choice of deployment approaches. You can choose to deploy CA Federation Manager in a stand-alone mode for rapid installation, or as an extension to an existing Web access management infrastructure that is using CA SiteMinder. delivers reliable, scalable and manageable identity federation and enables your organization to act as an identity provider, a service provider, or both, through support of federation standards.

2 Provides Internet Single Sign-on Internet technology and Web usage have matured to the point that Web-based coordination and integration between cloud providers, outsourcing, and other business partners is now readily achievable and affordable. With the advent of widely adopted security and federationspecific standards, it has become easy and economical to connect business and government applications within and across organizational boundaries via the Internet. CA Federation Manager enables your organization to rapidly implement and manage federation partnerships to take advantage of the reduced costs and new business opportunities that come from letting organizations automatically, but securely, access each other's applications. Key Capabilities AUTOMATED ADMINISTRATION OF PARTNERSHIPS Designed to make the setup, testing, and management of multiple federation partnerships fast and easy. BROAD FEDERATION STANDARDS SUPPORT provides out-of-the-box support for multiple federation standards, including SAML, to enable you to federate easily with a wide range of external partners and internal business units. FLEXIBLE DEPLOYMENT OPTIONS offers you a choice of deployment approaches. You can choose to deploy in a stand-alone mode for rapid installation. In this mode, CA SiteMinder is not required, although can easily connect to CA SiteMinder if both Web access management and identity federation are desired. can also be deployed as an extension to an existing CA SiteMinder installation if CA SiteMinder is already in use and you choose to add federation capabilities to your Web access management infrastructure. PARTNER END POINT INCLUDED For every partnership licensed, CA includes an unlimited user Endpoint that customers can provide to their partners who are not otherwise federation enabled. The endpoint license allows partners of your choosing, often smaller and less technically sophisticated, to use the CA Federation Manager software to federate with you. This will save you time and trouble in supporting your partners who have no federation experience, but need to federate with you. ENABLES BOTH IDENTITY PROVIDER AND SERVICE PROVIDER FEDERATION ROLES CA Federation Manager enables you to function as either an identity provider (as the user s home site), a service provider (to receive remotely authenticated users), or both, as appropriate for a given partnership. In addition, it supports the delegation of authentication to existing Web applications on the identity provider side. SINGLE SIGN-ON AND SINGLE LOGOUT provides both single sign-on (SSO) and single logout (SLO/SOAP) functions across federated security domains. RELIABLE PERFORMANCE is built using proven CA SiteMinder technology. CA SiteMinder is an enterprise-scale Web access management product that has been a leader in the market for over ten years. 2 PRODUCT BRIEF: CA FEDERATION MANAGER

3 FIGURE A helps you improve your user experience, accelerate your user execution of business partnerships, reduce costs, manage complexity and improve your IT security and control. CA FEDERATION MANAGER ENABLES SINGLE SIGN-ON FOR THE INTERNET Enhances the User Experience and Reduces Cost While Improving Security and Easing Regulatory Compliance The Web is open for business around-the-clock, and enables your online presence to be secure, available and accessible to the right users, without security getting in their way. INCREASE BUSINESS OPPORTUNITIES Federation enables faster, easier, and more secure deployments of partner-based, collaborative applications. couples the necessary security controls with single sign-on to accelerate revenue-enhancing business relationships, while still reducing costs and mitigating risks. INCREASE USER CONVENIENCE Online users expect quick and easy application access regardless of where the applications they want to access reside. With, your ability to enable single sign-on across domains to partner applications speeds and enhances the user experience. INCREASE SECURITY You can outsource applications, but you cannot outsource the responsibility for keeping organizational and user data secure and private. Federation provides a means to integrate the security implementations of the two organizations so that the security of the session with the user can be maintained across the domains. MANAGE COSTS reduces the cost of managing identities across a network of partners by more broadly leveraging the identity management, user authentication, and access management practices of the organization that best knows the user. No longer does every organization in a partner network need to proof and authenticate the user s identity and issue and manage the user s credentials with federation they can centralize this activity. PRODUCT BRIEF: CA FEDERATION MANAGER 3

4 Also, federated applications can significantly reduce the use of your Service Desk by easing access to outsourced applications. CA FEDERATION MANAGER STANDARDS AND COMPATIBILITY STANDARDS COMPLIANCE ENTERPRISE APPLICATIONS SSO SAMPLE OF SUPPORTED CLOUD PROVIDERS USER DIRECTORIES OPERATING SYSTEMS SAML 2.0 SAML 1.1 SAML 1.0 WS-Federation/ Microsoft ADFS IPv6 FIPS 140-2i18n Siebel PeopleSoft Oracle SAP CA Single Sign-on CA Clarity On Demand Cisco WebEx expresso Google Applications PivotLink Salesforce.com Exostar LDAP Active Directory ODBC Microsoft Windows Sun Solaris HP-UX Red Hat Enterprise Linux SuSE Linux The CA Advantage A Comprehensive, Integrated and Modular Approach to Managing Security on the Web is a key component of CA s solutions for Secure Web Business Enablement. CA s integrated but modular products allow your organization to select the components that target specific areas of immediate need, while providing the organization with a path for integrated growth. The modular approach also enables you to start with the product that meets your most critical need and implement a solution in phases, or implement the whole Secure Web Business Enablement solution at one time, depending on your budget and business goals. Other products in the Secure Web Business Enablement solution include: CA SiteMinder provides flexible and scalable policy enforcement for Web applications, as well as Web-based single sign-on. CA SOA Security Manager provides flexible access management for SOA and Web services based architectures. CA Identity Manager provides identity administration and auditing for managing all user Web identities. Once in place, CA solutions can help you open the door to a multitude of new opportunities. Your organization can rapidly deploy new Web applications and services and bring new users on board quickly and efficiently. 4 PRODUCT BRIEF: CA FEDERATION MANAGER

5 CA Services and our partners can help you assess your current federation situation, define your goals and implement solutions to gain measurable results. To keep all your CA solutions operating at peak performance, CA Support delivers unparalleled technical and customer support worldwide, and we offer training and certification through CA Education. CA Education a preferred source for IT management and best practices training is an important part of our services offering. We assess your training needs, create the right training plan for you and optimize the program with advanced coursework and industry certifications. Next Steps enables you to configure, manage, and monitor access to federated Web applications and cloud services. It enables your organization to reduce costs, more quickly seize new business opportunities, and provide greater convenience, choice, and control for your users. Contact CA today to find out how our approach to identity federation can enhance your ability to take advantage of Internet single sign-on to expand your Web business services securely and reliably to all your customers, partners and employees. To learn more, and see how CA software solutions enable organizations to unify IT and simplify the management of complex computing environments across the enterprise for better business results, visit ca.com/products. Copyright 2010 CA. All rights reserved. All trademarks, trade names, service marks and logos referenced herein belong to their respective companies. 1579_0210 Learn more about how CA can help you transform your business at ca.com