Identity Management: Every User, Device, and App
Identity Access Management (IDaaS): Centralized and agile admin for every user, account, application and device
Automated provisioning, greater control and a secure and easy way to manage and synchronize credentials throughout the enterprise
With so many devices, software licenses and access points across your enterprise, a solid identity management service ensures only authorized users can access the proper assets. Regardless of whether a user is seeking permission for a network-based program or an internet application, your role-based provisioning is stored and managed. And, all those users; all those applications–too many passwords to effectively administer.–CloudAccess provides a secure and easy way to manage and synchronize credentials throughout the enterprise.
Automates the process of adding, updating, and removing user accounts and entitlements across applications in private or public clouds.
- Unify the convenience of access with administrative control of identities across an enterprise
- Provision and de-provision users quickly and cost-effectively
- Assign rights and access based on identity and role
- Provide core IGA features like access certification/ re-certification and provisioning/de-provisioning workflows
- Support multiple authentication and authorization enforcement methods through synchronized central source
- Connect seamlessly with any database, Active Directory, LDAP etc…
Whether managing dozens, 100s or 1000s of employees, it’s tough to keep up with changing roles, new hires and terminations. CloudIDM adjusts access levels automatically saving countless man hours and reinforcing security.
Identity Management is full-featured cloud-based offering that addresses many challenges facing enterprises. It allows organizations of all sizes to successfully:
- Seamless integration with Single Sign On and Access Management
- Reduce high cost of manually managing identity and access processes
- Manage multiple identities for each user (human resource profiles, e-mail accounts, telephone numbers, usernames, physical access security badges and more)
- Change entitlements when user roles change, risking Separation of Duties (SoD) policy violations
- Prove secure access to compliance auditors; achieving and maintaining systems-level compliance
- Duplicate access controls outside the firewall; shares trusted sources with external constituents, including partners, contractors and customers
- Enforce policies consistently across entire organization and in virtual or cloud environments.
- Apply trusted identity and security management controls to all major systems including virtual machines and the cloud
- Develop integration between major IT systems and easily deploy and manage their identity solution
- Eliminate voids between identity management and compliance reporting
Federated and interoperable identity infrastructures dramatically simplify the task of monitoring and documenting policy compliance.
- Allow data integration and automated synchronization with other security tools to recognize patterns of behavior
- Central identity analysis process collects data and shares with sophisticated correlation engine.
- Uses identities, access, and applications to discover better situational context
- Mobile (BYOD) Management
- Control and monitor privileged users.
Selected as Product of the Week by
FROM OUR BLOG: Read about the difference between identity and access management
FROM OUR BLOG: Read about the “secret sauce” of user provisioning
Overview
Cloud computing has been around for years, the cost of traditional identity management products (hardware, software licenses and deployment) as well as lack of resources and expertise has made it difficult for many organizations to take advantage of the significant opportunities that cloud computing brings to an enterprise. With the popularity of cloud model and SaaS applications the need for an affordable, manageable identity management products to oversee users and user access to applications, both within the enterprise and in the cloud, is even more evident. A true “designed-for-the-cloud” solution, Cloud Identity Management helps address many of the business and resource issues associated with cloud computing. Designed to operate in highly distributed multi-tenant cloud environments for any size organization, CloudAccess’ identity management products reduce the cost and the complexity of extending internal infrastructure to external SaaS and cloud application
- Offer strong and vast connectors to apps, directories, protocols
- Provide broad compliance reporting capabilities
- Central support of cloud AND on-premise identities, SaaS and legacy apps
- User friendly self service password management
- Support and secure use of social identities
SIngle Sign on: part of our single pane of glass approach
Your organization runs dozens of applications from ERP to accounting to sales collaboration. Yet, managing all those sign-ons across the enterprise can be like herding cats. And as your SaaS portfolio grows, so do the challenges. Our powerful and secure SSO solution centralizes control for all your apps and manages access to external applications from multiple devices..
Features include:
- User provisioning/de-provisioning
- Provisioning to SaaS applications
- Role-based provisioning
- Password management and synchronization
- User self service
- Integrated approval workflow
- Visual provisioning workflow designer
- Compliance management with full audit and reporting
- Reconciliation & attestation
- Advanced reporting on user access
- Continuous compliance and validation
- Out-of-the-box connectors to a variety of systems
- Fine gained delegated administration
- No hardware, software or administration costs
- Pay-as-you-go, scalable model
- Flexible deployment option with private cloud, public cloud or hybrid model
- Integrates with other CloudAccess modules
- Integrates with existing security infrastructure
- Choice of service levels up to 7×24×365
Benefits
In addition to cloud-based security advantages, CloudAccess Identity Management: reduces IT cost, meets compliance requirements easily and quickly, provides a better user experience, with improved administration and operational efficiencies, enabling you to focus on your core competencies. It promotes managing identity in the cloud. Some of the specific benefits include:
Fast Deployment. Unlike traditional security solutions Identity Management is deployed in hours or days depending on the number of applications or users. There is no hardware or software installation required.
Audit, Compliance and Reporting. Federated and interoperable identity infrastructures dramatically simplify the task of monitoring and documenting policy compliance. CloudAccess Identity Management allows businesses to gain in-depth visibility into user access across on-premise and Cloud applications for security, audit reporting and compliance. CloudAccess provides extensive and granular audit and reporting capabilities to meet any operational, legal, or compliance requirements, whether you need to meet PCI, HIPAA, SOX, or other compliance requirements. With out-of-the-box compliance reports you can easily and quickly generate reports to meet audit requirements saving time, money and valuable resources.
Interoperability. Designed from ground up for cloud and for a multi-tenant environment, CloudAccess Identity and Access Manager meets or exceeds industry standards allowing organizations to enable security for internal and web-based applications regardless of the application platforms, access protocols, or existing identity infrastructure.
Reduced IT Complexity and Cost. CloudAccess Identity Management allows for provisioning and de-provisioning users automatically. No more spreadsheet and human resources required to enable application access for new users or when user roles have changed. Reduce the helpdesk cost and IT support with user self-service capabilities to manage passwords. With our out-of-the-box connectors and the Role Management function, you can setup access automatically based on user roles.
Enhanced Security. Whenever a user’s role or access rights is changed, their levels of access to all applications including web, SaaS and internal enterprise applications are adjusted automatically and immediately. The modular but integrated design of SingleSource provides a centralized policy management.
On-Demand Scalable Pay-As-You-Go Service. All You Need is a Browser. With pay-as-you-go per-user per-month subscription model, there are no license fees, hardware, or professional services costs. Getting to your applications and managing them is easy with our portal. Add users and applications in a simple step in the administration console. Connection to your applications can easily be achieved with out-of-the-box connectors that are provided for most major applications. Software upgrades are automatic. CloudAccess web-based administration allows for automated account management, connection control, reports and audit support.
Not Just Identity Management, Integrated Modular System Supporting Your Growth. Unlike other available products, CloudAccess SingleSource platform provides a comprehensive suite of products to address Web SSO, SaaS SSO, Identity Management, SIEM and Log Management. Start with Identity Management and add other modules later. Manage all your Intranet and Internet applications from one management console enabling centralized access control, from public and private clouds. CloudAccess provides the same cloud philosophy for all modules in the suite. You can add SIEM and Log Management at any time for any number of users or devices and scale up or down as needed. This is the power of CloudAccess comprehensive security in the cloud.
Proven Technology. CloudAccess technology has been successfully utilized in large organizations and government agencies supporting millions of users. CloudAccess Identity Manager is a multi-tenant, high performance and scalable system built on the latest SOA and web services technologies. There are no agents to install.
Single Sign On
Transcending convenience, SaaS SSO is now a security necessity
Gain control over the IT environment while allowing users access cloud, mobile and on-premises apps from any device
Single sign on (or SSO) has moved beyond simply providing a convenient, means to centrally access applications. It has become a nexus of control for IT departments over which applications can be distributed to whom. While enforcing secure policies and reducing password sprawl, SaaS SSO from CloudAccess establishes the highest levels of multifactor authentication
CloudAccess simplifies the credentialing, authentication and administrative processes
- Manage all identities and enforce your unique policies from any directory.
- Google app certified.
- Active Directory or LDAP
- Protect web applications and APIs with identity standards.
- Identity Federation
- Integrated Web and Access Control
- Remote User Security
- Identity Enabled Access Management and
- Simplified User provisioning and deprovisioning
Maintain the sanctity of the assets, provide automated enforcement policies that untangle the complexity provisioning, and create seamless and orderly access for users at a manageable cost
Utilizing the latest identity federation standards, Cloud Access SaaS SSO provides complete access management capabilities for all enterprise network content, applications and services across a broad range of internal platforms and directory services as well as the ability to quickly extend those capabilities to external partners, collaboration solutions and SaaS applications.
-
Complete, centralized and unified access control that offers your employees, partners and customers fast, secure access to a full range of HTTP and non-HTTP environments, resources and applications from any location.
- Efficient password management, including a web single sign-on component that automatically establishes user identities, tracks passwords and provides internal and external users with secure, authorized access to resources.
- Regulatory compliance tools that provide deep visibility into network access information and generate detailed reports based on user behavior.
- Business policy enforcement capabilities that make it easy to set and enforce identity- and role-based access control policies across all your internal, external, and SaaS systems and applications.
- Fully integrated, out-of-the-box support for identity federation, including full support for SAML 2.0, WS-Federation, Liberty Alliance and other key federation standards.
- Provides advanced access management capabilities including fully integrated identity federation in one highly integrated infrastructure. Including support for SAML, WS-Federation, Liberty Alliance and CardSpace standards.
- Role-based business and IT policy enforcement
- Integrated secure sockets layer virtual private network (SSLVPN)
Access Management
Authorizing & Enforcing User Access Rights Across the Enterprise
Authenticating users and administrating which applications and assets they need can be a full time job. Simply managing passwords is an expensive proposition in itself.
CloudAccess unifies the convenience and security of single sign on (access management) with the controls of identity management. It enables the secure delivery of essential information and applications to your employees, partners, suppliers, and customers via secure SSO. It also scales to meet your growing business needs with flexible administration tools that can support either centralized or distributed administration.
CloudAccess provides multiple options for access management based on your need :
Federates any application (SAML and NON-SAML)
In today’s enterprise, more than 30% of web applications are incompatible with web access management (WAM) software. Simply, most web access management products lack the agent to protect the web applications, or the application is a legacy solution that does not follow standard protocols for single sign-on. This limits what types of web applications can be protected.
The Cloud Access gateway simplifies, centralizes and securely controls the tangle of credentials. We remove the API middleman and opens up federated enablement to 1000s of web, on-premise and legacy applications
We offer users a single username and password for seamless access to systems and resources from multiple channels—without time-consuming multiple logins and other access hurdles. And, while providing an enhanced level of identity protection,our unique gateway also automates many functions including reporting and auditing on user activity needed for compliance.
CloudAccess’ Identity Gateway “bridges” this issue by extending access management to encompass all web applications. Deployments can now be extended to be inclusive of those applications that do not integrate with policy agents alone. Additionally, Identity Gateway interoperates, out-of-the-box, with all management solutions.
Most importantly, your organization can on-board any web application without ever modifying or touching the target application again, significantly reducing the development required to protect web apps.
All done as a security-as-a-service solution from the cloud.
Configured your way: (click to view)
- OpenAM Integration
- SAML2-based Standards based agent
- Portal Application Login
- Federation Gateway SP Initiated SAML 2 SSO
- Federation Gateway IDP Initiated SAML 2 SSO
ID Gateway reduces IT costs and saves time.
- Easy to set and enforce identity- and role-based access control policies across all your internal, external, and SaaS systems and applications.
- Meets compliance requirements easily and quickly…including PCI, SOX HIPAA
- Provides a better user experience, creating a “one-stop hub” to seamlessly access authorized applications.
- Fully integrated, out-of-the-box support for identity federation (SAML 2.0,
- WS-Federation, Liberty Alliance & more
- Synchronizes with mobile devices
- Easily adds new applications or changes access requirements based on needs
- Leverages existing security on-premise or in the cloud.
Connectors
Using Identity Management (IDaaS), you can connect to thousands of SAML and Non-SAML applications. The connectors listed here allow for federated provisioning (SAML, SAML-2). For specific information on our advanced adapters/connector, click the link to access a PDF datasheet.
- Google Apps
- Office365
- Salesforce CRM
- Active Directory (AD)
- LDAP
- MySQL
- Zendesk
- Yammer
- Clarize
- IBM-RACF
- CA-ACF2
- CA-Top Secret
- IBM-i5
- AS/400 i-3
- AirWatch
- SAP ECC
- Solaris
- Linux RED HAT
- HP Tandem
- HP-UX
- HP OpenVMS
- Custom OpenIDM LDAP Integration
- Echosign
- Sugar CRM
- Samanage
- ScreenSteps-Live
- Joomla (plug-in source code + doc)
- WordPress (plug-in source code + doc)