{"id":4738,"date":"2013-09-03T16:07:26","date_gmt":"2013-11-29T22:00:00","guid":{"rendered":"\/web-access-manager\/web-access-manager-specification-22\/"},"modified":"2022-12-26T10:46:35","modified_gmt":"2022-12-26T08:46:35","slug":"web-access-manager-specification-22","status":"publish","type":"page","link":"https:\/\/www.evidian.com\/de\/products\/single-sign-on-web\/web-access-manager-specification-22\/","title":{"rendered":"Web Access Manager : Specification (2\/2)"},"content":{"rendered":"
\n
\n\t

Web Access Manager : Specification (2\/2)<\/h1>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div>
\n
\n\t

Evidian Web Access Manager is a product in constant functional development. The result of more than 15 years of research and development in the Web SSO domain, it can be adapted for a very broad range of uses. The functionality described here is not exhaustive and changes with each minor or major upgrade.<\/p>\n

Evidian Web Access Manager is based on the 4A principles, \"Authentication, Authorisation, Administration and Auditing\"<\/p>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div>

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\tEncoding and PKI\t\t\t\t\t\t<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n<\/div><\/div>
\n
\n\t\n\n\n\n\n\n\n\n
AES<\/b><\/td>\nThe sensitive configuration data, the secondary authentication data or the certificate storage are AES-encrypted in secure containers.<\/td>\n<\/tr>\n
SSL encoding<\/b><\/td>\nAll HTTP and LDAP connections can be secured through HTTPS and LDAPS. You can choose only strong encryption algorithms for additional security. Evidian Web Access Manager supports X509v3 certificates of type \u201cwildcard\u201d to protect a set of servers.<\/td>\n<\/tr>\n
Verifying certificates on protected servers<\/b><\/td>\nThe certificates used by the protected servers can be rigorously analyzed or not, if for example the server uses self-signed certificates that do not use a certification authority.<\/td>\n<\/tr>\n
CRLs<\/b><\/td>\nThe CRLs of the certification authorities can be downloaded through HTTP, LDAP or OCSP.<\/td>\n<\/tr>\n
PKI ready<\/b><\/td>\nFor its server certificates needs or to check client certificates, Evidian Web Access Manager accepts certificates from the Certification Authorities and can send certificate requests for PKIs.<\/td>\n<\/tr>\n
Verifying certificates daily<\/b><\/td>\nEvery night or at any specified time, the certificates contained in the Evidian Web Access Manager configuration are checked and email alerts are sent when these certificates are about to expire.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div>
\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\tAudit and log\t\t\t\t\t\t<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n<\/div><\/div>
\n
\n\t\n\n\n\n\n\n
Complete log<\/b><\/td>\nAll the user activity is recorded in log files. Each URL is saved as well as all the information on the user, their authentication method, the services accessed and any error codes received. The size of the files, the period recorded by the file and the number of files to be saved is configurable. All failed authentication attempts and any protocol errors are also archived. The log files can be used directly with tools capable of processing files in the \"W3C \u2013 Extended Log File Format\"<\/td>\n<\/tr>\n
Centralised audit and unique username<\/b><\/td>\nEvidian Web Access Manager generates audit events for primary and secondary authentications, the input of secondary data and failed authentication attempts. These events are centralised for consolidation through a link to Evidian IGA or Evidian E-SSO. A unique username extracted from the user directory can be deployed instead of their primary identity as the username for these events. The choice of this username facilitates consolidation based on your governance rules and compliance with local legislation on the anonymisation of consolidated data. Like all Evidian Web Access Manager components, the centralised audit mechanism is based on mechanisms for high availability and load balancing. But if all the centralisation links were to be cut off, it also has a local saving mechanism for lossless recovery.<\/td>\n<\/tr>\n
Diagnostic tools and updates<\/b><\/td>\nA set of commands for analysing connections, tracking, backup and capture tools are provided with the product, complete with documentation. If necessary, our Evidian Service Professional experts can diagnose, analyse, improve your configuration, based on a screenshot, and support you with its deployment.<\/td>\n<\/tr>\n
Analytics & Intelligence<\/b><\/a><\/td>\nWith the audit analysis functionality, Evidian Analytics and Intelligence places data into your daily operation. Through a business-oriented interface Evidian A&I allows you to track audit events and find the root cause of practices that you would consider abnormal or outside the normal use of the Identity and Access Management system.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div>
\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\tAdministration and configuration\t\t\t\t\t\t<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n<\/div><\/div>
\n
\n\t\n\n\n\n\n\n
Universal administration console<\/b><\/td>\nThe administration console is accessible using a web browser. It allows you to configure, use and administer all the contact points under its control. This console brings together all the administration operations in a single and unique point. It also allows logs to be consulted remotely, as well as the error messages produced at the contact points.<\/td>\n<\/tr>\n
Administration API<\/b><\/td>\nAdministration operations are also accessible through an API, to be integrated into the company's environment.<\/td>\n<\/tr>\n
Configuration management<\/b><\/td>\nThe Evidian Web Access Manager is stored in a dedicated LDAP directory, and may use replication mechanisms or the SafeKit option for high availability. A configuration can be exported or backed up from its directory and imported into another directory, as it contains all the necessary information.<\/td>\n<\/tr>\n
Daily saving of the configuration<\/b><\/td>\nEvery night, or at any programmed time, the configuration is saved in a configurable floating period.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div>
\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\tFederation and the cloud\t\t\t\t\t\t<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n<\/div><\/div>
\n
\n\t\n\n\n\n\n\n
SAML 2.0: service provider and identity provider<\/b><\/td>\nEvidian Web Access Manager supports SAML 2.0 as a Service Provider or an Identity Provider.<\/p>\n

All applications protected by Web Access Manager can become protected resources accessible to other trusted SAML domains.<\/p>\n

Similarly, resources external to the enterprise now become accessible while resting on the authentication mechanisms of the enterprise; Web Access Manager is used as an Identity Provider for the trusted external domains. It is this relation that is implemented to access SalesForce or GoogleApps, while managing user authentication with the enterprise means.<\/p>\n

Being a service or identity provider enables you to keep control of the accesses between the trusted domains, partners, affiliates or Cloud.<\/td>\n<\/tr>\n

Protecting private clouds<\/b><\/td>\nThe capabilities of Evidian Web Access Manager make the deployment of private clouds easier. WAM protects Web interfaces for administration or user connections to applications such as VMware vCloud Directory; it increases the authentication level and provides features to configure the security of new organizations. The same identity sources can then be used for internal Web applications and access to private Cloud features.<\/td>\n<\/tr>\n
OpenID connect authentication\/OAuth 2.0<\/b><\/td>\nEvidian Web Access Manager<\/strong> supports OpenID connect as a Service Provider or an Identity Provider.<\/td>\n<\/tr>\n
Cloud Access Management, Web Access Management<\/b><\/td>\nThe same Evidian Web Access Manager instance enables to manage consistently the access to internal applications, external applications and to control the access use to cloud applications. Cloud Access Management is therefore simplified and administered.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div>
\n
\n\t
\n
\n\t
\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t<\/a>Mit Produkten von Evidian, Sch\u00fctzen Sie ihr Unternehmen vor Cyber Attacken durch nicht autorisierte Anwender\t\t\t\t\t\t<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n<\/div><\/div><\/div><\/div><\/div>
\n
\n\t
<\/div>\n

<\/a>Orbion<\/a><\/h3>\n

Evidian k\u00fcmmert sich um alles was mit ihrem Identity und Access Management zu tun hat<\/p>\n

Mehr erfahren\u00a0 \u00a0><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div>
\n
\n\t
<\/div>\n

Identity Governance and Administration<\/a><\/strong><\/h3>\n

Verwaltet den Zugriff und die Autorisierung von allen Anwendern in ihrem Unternehmen<\/p>\n

Mehr erfahren\u00a0 \u00a0><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div>
\n
\n\t
<\/div>\n

Web Access Manager<\/a><\/h3>\n

Schnittstelle f\u00fcr Web- Anwendungen mit SSO, Mulitfaktor Authentifizierung und Identity Federation<\/p>\n

Mehr erfahren\u00a0 \u00a0><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div>
\n
\n\t
<\/div>\n

Analytics<\/a><\/h3>\n

\u00dcberwachung und leistungsstarkes Reporting zur Einhaltung gesetzlicher Vorschriften<\/p>\n

Mehr erfahren\u00a0 \u00a0><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div>

Authentication Manager<\/h3>\n
\n\t
<\/div>\n

Authentication Manager<\/a><\/h3>\n

Unternehmensweite Multifaktor- und passwortfreie- Authentifizierung an Windows PCs<\/p>\n

Mehr erfahren\u00a0 \u00a0><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div>
\n
\n\t
<\/div>\n

Enterprise Single Sign-On (SSO)<\/a><\/h3>\n

Sicherer Zugriff auf Legacy- und Web- Anwendungen auf PCs und mobilen Ger\u00e4ten mittels SSO<\/p>\n

Mehr erfahren\u00a0 \u00a0><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div>
\n
\n\t
<\/div>\n

Self Service\u00a0Password Reset (SSPR)<\/a><\/h3>\n

Zur\u00fccksetzen des Windows Passwortes Online und Offline<\/p>\n

Mehr erfahren\u00a0 \u00a0><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div>
\n
\n\t
<\/div>\n

SafeKit<\/a><\/h3>\n

Hochverf\u00fcgbarkeitssoftware f\u00fcr kritische Anwendungen<\/p>\n

Mehr erfahren\u00a0 \u00a0><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div>
\n
\n\t

Erfahren Sie mehr \u00fcber Digital Security L\u00f6sungen ><\/a><\/h4>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div>
\n
\n\t
\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\tDokumente\t\t\t\t\t\t<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n<\/div><\/div>
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\tBrosch\u00fcren >\t\t<\/span>\n\t\t\t<\/a>\n\t<\/div>\n<\/div><\/div>
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\tWhite Paper >\t\t<\/span>\n\t\t\t<\/a>\n\t<\/div>\n<\/div><\/div>
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\tFallstudien >\t\t<\/span>\n\t\t\t<\/a>\n\t<\/div>\n<\/div><\/div>
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\tVideos >\t\t<\/span>\n\t\t\t<\/a>\n\t<\/div>\n<\/div><\/div>
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\tTutorials >\t\t<\/span>\n\t\t\t<\/a>\n\t<\/div>\n<\/div><\/div>
\n\t\t\t\n\t\t\n\t\t\t\n\t\t\tAnalysten >\t\t<\/span>\n\t\t\t<\/a>\n\t<\/div>\n<\/div><\/div><\/div>
\n
\n\t