Enterprise Single Sign-On (SSO) Manager

Organizations currently use complex networks comprised of multiple resources, such as internal network applications, internet applications and operating systems, with end-users typically needing to enter a username and password for each. In some cases, there can be more than 15 different applications with associated usernames and passwords, which creates a number of problems. Not only is manual entry time-consuming, it is also extremely difficult to remember a multitude of passwords. Users adopt all sorts of insecure methods to cope with this situation, such as passwords written on Post-It notes, extremely simple passwords, or passwords under the keyboard. In addition, users frequently have to call the helpdesk for a forgotten password.
Research shows that 67 percent of all business professionals spend too much time with the login procedure. Read the research.

Reduction of password reset calls to the helpdesk

Nevertheless, all sorts of preventive measures are taken by system administrators to keep the network secure, such as introducing complicated passwords, the validity of a password, or communicating with users not to write down their passwords. This produces more frustration among users and an overload of password reset calls.

Tools4ever’s Single Sign-On solution eliminates the time-consuming and risky operations associated with remembering and entering so many different passwords.

How does E-SSOM work?

E-SSOM works as a service on a workstation and is activated when a login dialog is displayed to the user. E-SSOM will fill in the username, password and press the OK button automatically. The user of the workstation may see the login screen briefly but there will be no action (manually login) to undertake with the application.

References

Customers who use Enterprise Single Sign On Manager include:
Hospital Rivierenland
All Star Automotive

Fast User Switching

This feature allows users to logon to and logoff from public computers quickly. When users log on using Fast User Switching, applications that they require can be automatically started and logged on to. When users log off, E-SSOM can log off from the applications and/or close them. The login procedures can be simplified by combining Fast User Switching with a smart card. In this way, users can obtain access to applications by inserting their smart card. They can log out by removing their smart card, so that the computer becomes available for the next user.

Two-factor authentication

Two-factor authentication (TFA or 2FA) involves using two independent resources to confirm a person’s identify. E-SSOM can provide additional security for the SSO login based on a user smart card with a PIN code.

Follow-Me

An addition to Fast User Switching is the Follow-Me principle, which allows users who have opened applications on Citrix and/or Terminal Server to continue their work on another computer. This results in considerable time savings, particularly in the case of specialists who make their rounds along departments and need to have access to their data via various computers.

Versatility

Almost every application is suitable for single sign on access. Here is a list of applications for our customers with E-SSOM support.

Security

E-SSOM handles all user account details in a safe and secure manner.

Scalability

We often observe a peak in the use of an SSO application in the mornings as employees begin their working day. Research shows that in 96.5 percent of cases, E-SSOM is used during the first 30 minutes of the working day. During this time, the central E-SSOM engine must be capable of supplying all the details for the end-users and their applications. To streamline this process, the log-in request is distributed to a variety of Microsoft Windows Services. Our license model permits an unlimited number of E-SSOM service requests in the network and supports up to 250,000 workstations.

High availability

End-users will be dependent on the SSO solution to an increasing degree. The software’s availability is thus crucial. E-SSOM guarantees that end-users are always able to use the software through a variety of mechanisms. These mechanisms are:

Integration with other solutions

The central E-SSOM engine supports integration with external systems and applications. E-SSOM has both a COM object interface and contains support for an open standard SPML (Service Provisioning Markup Language). SPML is based on SOAP/XML messages and E-SSOM supports web services. E-SSOM can be integrated with applications for password resetting and user provisioning.

Multiple user accounts per employee

Some end-users have access to an application through a variety of accounts and usernames, for instance system administrators. For example they have a ‘normal’ account and an ‘admin’ account. This system administrator probably has access to a number of environments for development, testing or production. In such cases E-SSOM shows an extra window when the application is launched. Here the administrator selects a specific username and/or environment. E-SSOM then ensures that the application is launched in the correct environment with the correct username/password combination.

Delegating applications

During a vacation or sick leave, it may be necessary to grant another user temporary access to one or more applications. This requires network modification to ensure that the temporary user acquires the correct rights. This also entails risks as it is often forgotten to revoke the temporary rights again. E-SSOM offers the ability to delegate specific rights of the absent employee to another end-user for a specific period. Once the configured period has passed, the rights of the temporary employee are automatically revoked.

Enhances ease of use

End-users no longer need to log in separately for every application they want to use. Based on their rights, E-SSOM automatically supplies the required username and passwords and the application is opened. E-SSOM is easy and efficient.

Reduces risk

Multiple applications generally require multiple usernames and passwords. This confidential information is often written on a piece of paper and stays within reach of the computer. This is an insecure situation and negates your expensive and complex security measures. E-SSOM reduces the risks within your organization by avoiding this frequently-occurring situation.

Fulfills compliance

E-SSOM acts as a central access portal to all applications. This offers several options for fulfilling compliance. Thus, access to the entire network for an end-user can be denied in a single SSO action instead of having to go through every application individually. With E-SSOM, if you wish, a report can be generated on which user accounts have access and the dates and times access occurred. Finally, E-SSOM can perform extra checks before log-in is achieved. This often occurs with critical applications where extra security is built in to verify that the right end-user wants access. This allows for the integration of Smart Cards or a PIN code, amongst others.

Software requirements

Minimal hardware requirements

Processor: Pentium III (Pentium 4 or higher recommended)
Memory: 512 MB RAM (1 GB or more recommended)
Hard disk space: 256 MB (1 GB or more recommended)

Depending on the exact configuration and used components the system requirements may vary.