Single Sign-On. Security and comfort can be friend. Arnd Langguth. September, 2006

Transcription

1 Single Sign-On Security and comfort can be friend. Arnd Langguth September, 2006

2 Identity proliferation in the enterprise

3 Password management problem How many passwords do you have?

4 Password management problem Too many to remember! johnnyjjohnson_04 jjohnson077 johnnyj294 johnmeister_192 johnnyjohnjohn ******** jj122 bigjohn_92 johnny_thegolfer413 ******************************************************************************** ****** jjohnson077 ****** st.john_140 johnathan_17 jjj_021 **** john_johnson_45 **** ******

5 Password management problem Large % of help desk time spent on password resets [eweek] ~$45 cost to reset a password [Gartner] 30% of all call password related User frustration remembering too many credentials User inconvenience and workflow difficulties

6 Password management problem Security issues Usage of weak password Manual password synchronization Passwords written down Need to achieve application-level strong authentication Certificates Smart Cards Tokens Legislative requirements

7 Password management problem

8 Evolution of the digital identity Level of legislative compliance Voluntary and mandatory regulations The digital divide Companies level of compliance Time toward binding ecommerce

9 Credential Consolidation with SSO

10 Novell SecureLogin

11 Novell SecureLogin benefits

12 Novell SecureLogin technical features Credential management solution leverages coorperate directory Fast deployment through flexible architecture Extensive support for applications, mainframes, and terminal emulators Enforces strong network and application level security Requires no changes to the applications

13 Novell SecureLogin technical features Complements Identity Management Novell Identity Manager Synchronizes user data between systems Provisions / deprovisions users into the system Provides credentials to SecureLogin ichain / Novell Access Manager Provide single sign-on to internal web resources Fine grained access control Novell SecureLogin Closes the loop handles credential entry into the application Provides SSO to external web resources Enforce strong authentication / password policy at the application Support legacy application SSO

14 New features in Novell SecureLogin 6 Usability New user interface Enhanced web wizard More applications supported out of the box Seamless login for standalone mode Security FIPS compliant cryptographic libraries Application credential storage on smart card User data store can be encrypted using PKI based credentials AES algorithm support for user data store encryption Optional non-repudiation protection Smart card based One Time Password (OTP) support

15 New features in Novell SecureLogin 6 Functionality Support for Mozilla Firefox User initiated backup / restore of credentials Detect Windows applications that open prior to SecureLogin Microsoft Active Directory Application Mode (ADAM) support Administration Web based administration through imanager New LDAP based administrative tool, including LDAP browser Administration via Active Directory group policies Event logging using Novell Audit Users can view credentials without modifying them

16 Identity & Access Management Implementation Proof of Identity Consolidate Credentials Provisioning and access management PKI Kerberos Onetime Password Passport Identity Username/ Password Liberty Identity Access Control

17 SecureLogin and strong authentication

18 A holistic approach Novell IDM Novell SecureLogin Novell Identity Assurance Solution *Activity *Role

19 Managing the Smartcard Lifecycle Affiliation Sponsor Enrollment Enrollment Officer Vetting & Background Checks OPM & Automated systems Card Use Card holder SC Maintenance Help Desk Card Production Production Facility SC Termination Sponsor *Activity *Role Card Finalization Finalization Officer

20 Novell PIV Solution Overview Issuance & Management Enrollment PIV Event Monitoring Access Control

21 Novell Identity Assurance Use Case 1: Initial Card Issuance Sponsor requests new card issuance

22 Novell Identity Assurance Use Case 2: Physical & Logical Access Control Sponsor selects appropriate physical and logical access for applicant which initiates PIV workflow and verification process

23 Questions? Answers

24 Thanks for your attention September, 2006