(A) User Convenience. Password Express Benefits. Increase user convenience and productivity

Transcription

1 Comparison Feature Sheet Feature Sheet is a next generation password management and password synchronization tool that provides users with reduced sign on experience across all applications and password self-service from any device, anytime and anywhere. With, users only need to remember one complex password and not many. Benefits Increase user convenience and productivity Reduced sign-on across all web and thick client applications self-service from any device, anytime and anywhere Reduce password related help-desk calls Achieve compliance with extensive auditing and reporting 1 (A) User Convenience 1 BYOD support for browser-based password self-service on smartphones & tablets 2 Self-Service from locked Windows workstation 3 Self-Service from locked Mac workstation 4 Profile Self-Service to update user information in LDAP 1

2 2 ******* (B) Management 1 Choice of granular configuration of challenge response policies on one or more parameters - user defined, admin defined, selection from prelisted question 2 Support for password self-service with Multi-factor authentication - Challenge response questions along with SMS based one-time passcode 3 Support for password self-service with Multi-factor authentication - Challenge response questions along with smart-phone based application that generates one-time passcode every 30 seconds 4 User profile policy to view/edit LDAP attributes 5 Configurable automatic password expiry notification s to users until password is reset 6 Support for AD 2008 and AD 2012 fine grained and multiple password policy rules 7 Support for password management on any form of complex of AD multiforest environment 8 Support for password replication in multiple DCs of a domain distributed across geographical location 9 Support for OpenLDAP Policy Module (ppolicy) 10 Support for configuration of more than one OpenLDAP for password management 11 Intelligent health-check and failover schemes to the additional AD server 2

3 3 (C) Synchronization 1 Active Directory and/or OpenLDAP Synchronization with target applications (Web,Thick client,command line based) 2 Reverse password sync agent to transparently initiate password sync from Ctrl+Alt+Del change password or direct change in Active Directory 3 Service Bus based engine to sync password with any kind of target application 4 Large pool of connectors for password sync to various target applications and platforms - SaaS applications, OS, Databases, ERP's, CRM's etc 5 sync connector toolkit to develop Custom Sync connector for target applications which are not provided out-of-the-box 6 Advanced rule based auto-account discovery on target applications for password sync 7 Manual Account Linking for users to link Active Directory and/or OpenLDAP account to multiple application accounts for password sync (D) Policy Enforcement (Add-On component on top of ) 1 Policy Enforcer (PPE) Agent based Powerful password policy with over 24 configurable rules 2 Policy Enforcer (PPE) based on OUs/Groups/Users for privileged users and end users 3 Policy Enforcer(PPE) encourages longer passwords based on password length 4 Advanced dictionary rule based password policy configuration 3

4 5 (E) Security 1 Role-based configuration of enhanced layer of security using one time passcode via SMS or soft-token based passcode generated on smartphones 2 Differentiated role definition for end user, helpdesk and administrators 3 Alerts notifications on reset password by SMS and 4 SMS gateway integration toolkit for simple integration to 3rd party SMS gateways 5 Multi factor authentication based on location 6 Intelligent self-service lockout policy to prevent password reset by intruders 7 Intelligent SMS throttling prevention policy to prevent Denial of Service (DoS) attacks on SMS gateway 8 Verification of user identity by service-desk staff before resetting user's account 6 (F) Mass User Enrollment 1 Automated policy based reminders to users for self-registration with 2 Bulk registration of users from trusted source having challenge response answers such as PeopleSoft 3 Scheduler based auto incremental user registration or new-hires and terminations 4 Easy adoption of through self-registration prompt post Windows Logon 5 Policy based auto-deployment of GINA/Credential Provider based Windows desktop agent on end user computer's logon screen 6 Auto-discovery of newly added computer for auto-deployment of GINA/Credential Provider plugin based Windows desktop agent 4

5 7 (G) IAM Integration 1 Integration with Identity management products (Oracle,IBM,NetIQ,CA) for password management 2 Integration with SIEM products such as Arcsight, IBM Qradar, and NetIQ Sentinel 8 (H) Audit and Report 1 Graphical Dashboard for representation of all enterprise password events and dozens other events are captured and represented in graphical form 2 Out-of-the-box reports available in PDF/Excel format 3 Support for generation of a custom report via 3rd party reporting tool integration 4 Easy audit of all password management events via 9 (I) Administration & Deployment Ease click process to install and configure 2 Easy access to application logs 3 24x7 support 4 Ensured access to status of components of through Health Check 5 Simplified integration to password management functionality within the current internal portal of an enterprise product-enquiry@ilantus.com 5