Evidian Enterprise SSO

Managing IT security risks implies controlling access. Enterprise single sign-on (SSO) is a great way to control access to your information system without overwhelming users with passwords that are difficult to manage.

Simplify and reinforce access to your applications

Enterprise single sign-on enters application passwords automatically, in place of the user, and can change passwords according to a strict policy. This ensures application access security while keeping tasks simple for users and administrators.

As a result, your users naturally comply with your security policy. You can manage access rights and roles with just a few mouse clicks. For example, you can enforce smart card-based access to hospital kiosk PCs, or make the ERP application accessible to accountants only.

Secure shared accounts and user-to-user delegations

Evidian Enterprise SSO lets your users share the same generic accounts, or delegate their access to each other while absent. They do not reveal their passwords while doing so, and delegated accesses are logged with the real user's name.

Using a self-administration web portal, users who are ill or on holidays can remotely delegate all or part of their accounts, in full compliance with the corporate security policy.

Ensure that your information system is compliant with laws and regulations

Sarbanes-Oxley, medical confidentiality, PCI DSS or laws on financial integrity: Evidian Enterprise SSO can help you comply with your legal and regulatory requirements.

All your employees’ attempts to access applications and PCs will be recorded in a central database. All accesses are recorded by name, including accesses to Windows accounts and generic applications. This will enable you to demonstrate that your access policy is respected and fulfils its objectives.

More Enterprise SS0 features

Optimize your costs

A call to the helpdesk can costs up to 15 euros. Single sign-on helps you reduce these calls to 30% as employees no longer lose their application passwords. Moreover, automating user connections will prevent accounts from being blocked due to typing errors or keyboard status.

And with Evidian Authentication Manager, if users lose their Windows password, they can unlock their station at any time without seeking assistance from the helpdesk - even without network connection.

Enterprise SSO automatically provides you with a list of active users of your applications. As a result, you will be able to optimize the licence costs of these applications.

A non-intrusive solution

You will not need to modify any of your applications. Evidian Enterprise SSO activates single sign-on in any type of applications: client/server, web, SAP GUI, terminal emulator, etc.

Convergence with remote accesses

Thanks to Evidian Web Access Manager – Mobile E-SSO, it will be possible to open a secure remote access to web or Citrix applications.

Application passwords will be shared between internal and external accesses; you will thus avoid any risk of desynchronization between the different single sign-on solutions.

Easy deployment in your existing infrastructure

Evidian Enterprise SSO is based on an LDAP directory or Active Directory. No additional hardware is required. The entire security data is encrypted.

It collects user passwords so they do not need to be redefined, or it can be associated with an existing provisioning system.

You can start with only one department and then deploy SSO later on thousands of PCs.

Strong authentication

Enterprise SSO can be completed with Evidian Authentication Manager which reinforces and manages authentication: biometrics, smartcards, USB tokens, etc. If an employee forgets his Windows password, or if his access card does not work any longer, he will be able to unlock his access even offline, with or without the help of the helpdesk.

Business-oriented functions

With Evidian Authentication Manager, sales teams and branch office employees can share a kiosk PC. They can switch to their own environment in a matter of seconds, without having to close then open a Windows session. When doctors make rounds in a hospital their session moves with them.

Traders and control-room technicians can lock, unlock, and delegate fully or partially, permanently or temporarily, a cluster of PCs with a single multi-factor authentication.

Support \| Contact us Authentication management Enterprise single sign-on Web single sign-on Identity and access management Network and system monitoring High availability For Microsoft Environment Industry Solutions Finance Healthcare Enterprise Government Telecommunications Consulting and implementation Training and certification Support Find a partner Become a partner Resources for partners Training and certification White papers Case studies and brochures Newsletter SSO demo SafeKit trial Overview Careers Offices and distributors Events News
Products Authentication Management Enterprise single sign-on Web single sign-on Identity and access management Network and system monitoring High availability	... IAM solutions > Enterprise SSO Evidian Enterprise SSO Managing IT security risks implies controlling access. Enterprise single sign-on (SSO) is a great way to control access to your information system without overwhelming users with passwords that are difficult to manage. Simplify and reinforce access to your applications Enterprise single sign-on enters application passwords automatically, in place of the user, and can change passwords according to a strict policy. This ensures application access security while keeping tasks simple for users and administrators. As a result, your users naturally comply with your security policy. You can manage access rights and roles with just a few mouse clicks. For example, you can enforce smart card-based access to hospital kiosk PCs, or make the ERP application accessible to accountants only. Secure shared accounts and user-to-user delegations Evidian Enterprise SSO lets your users share the same generic accounts, or delegate their access to each other while absent. They do not reveal their passwords while doing so, and delegated accesses are logged with the real user's name. Using a self-administration web portal, users who are ill or on holidays can remotely delegate all or part of their accounts, in full compliance with the corporate security policy. Ensure that your information system is compliant with laws and regulations Sarbanes-Oxley, medical confidentiality, PCI DSS or laws on financial integrity: Evidian Enterprise SSO can help you comply with your legal and regulatory requirements. All your employees’ attempts to access applications and PCs will be recorded in a central database. All accesses are recorded by name, including accesses to Windows accounts and generic applications. This will enable you to demonstrate that your access policy is respected and fulfils its objectives. More Enterprise SS0 features Optimize your costs Optimize your costs A call to the helpdesk can costs up to 15 euros. Single sign-on helps you reduce these calls to 30% as employees no longer lose their application passwords. Moreover, automating user connections will prevent accounts from being blocked due to typing errors or keyboard status. And with Evidian Authentication Manager, if users lose their Windows password, they can unlock their station at any time without seeking assistance from the helpdesk - even without network connection. Enterprise SSO automatically provides you with a list of active users of your applications. As a result, you will be able to optimize the licence costs of these applications. A non-intrusive solution A non-intrusive solution You will not need to modify any of your applications. Evidian Enterprise SSO activates single sign-on in any type of applications: client/server, web, SAP GUI, terminal emulator, etc. Convergence with remote accesses Convergence with remote accesses Thanks to Evidian Web Access Manager – Mobile E-SSO, it will be possible to open a secure remote access to web or Citrix applications. Application passwords will be shared between internal and external accesses; you will thus avoid any risk of desynchronization between the different single sign-on solutions. Easy deployment in your existing infrastructure Easy deployment in your existing infrastructure Evidian Enterprise SSO is based on an LDAP directory or Active Directory. No additional hardware is required. The entire security data is encrypted. It collects user passwords so they do not need to be redefined, or it can be associated with an existing provisioning system. You can start with only one department and then deploy SSO later on thousands of PCs. Strong authentication Strong authentication Enterprise SSO can be completed with Evidian Authentication Manager which reinforces and manages authentication: biometrics, smartcards, USB tokens, etc. If an employee forgets his Windows password, or if his access card does not work any longer, he will be able to unlock his access even offline, with or without the help of the helpdesk. Business-oriented functions Business-oriented functions With Evidian Authentication Manager, sales teams and branch office employees can share a kiosk PC. They can switch to their own environment in a matter of seconds, without having to close then open a Windows session. When doctors make rounds in a hospital their session moves with them. Traders and control-room technicians can lock, unlock, and delegate fully or partially, permanently or temporarily, a cluster of PCs with a single multi-factor authentication.