IDaaS Access & Governance
The unique convergence of Access and Governance from aSingle Pane of Glass
Evidian IDaaS Access & Governance
A comprehensive identity and access management solution asa service. Recognising the latest Self Sovereign Identity andPrescriptive Identity Access Management standards, EvidianIDaaS seamlessly delivers a zero-trust environment.
Dynamic user life-cycle and access management, integrates
bleeding-edge multi-factor authentication (MFA), identity
federation and Single-Sign-On (SSO) for a superior userexperience. Todays agile working environment demands anexpedient user on-boarding procedure for your cloud-based
applications.
The new IDaaS Access & Governance console has been
designed to be managed by everyone through a user-friendly
web interface.

Centralise Identity
Identify and manage all users based on the need to accessapplications. Ensuring employees, subcontractors, partners
and customers have only relevant access rights.

Support Identity Federation
It is possible to control who accesses IT resources while
delegating partner identity authentication to an external
identity provider (IdP). The solution supports SAML (SecurityAssertion Markup Language) 2.0 and OpenID Connect as well
as OAuth 2.0 for Single Sign On (SSO), identity federation andauthorization control. Users can also be provisioned between
trusted domains in more complex business environments
involving partners and affiliates.

Users Rights Management
Define and update the rights of all identities, having thecapability to manage the change of these rights over time.
Implemented through a security policy, based on the extended
RBAC model with its foundations of organisation and context.

Facilitate Access Management of hybrid
infrastructures
Provides each user profile with a secure and single point ofaccess to all applications. Replaces multiple existing accesspages that use less secure dedicated authentication solutions.
Supports fine-grained synchronisation for provisioning
identities

Make the user the actor of identities 		
and rights

Business-oriented workflow processes, allow users to manage
their own identity life cycle rights and the governance of rights,
through account review processes.

Strengthen security and enable self-service
Enforce and verify policy on target systems. Create or deleterights based on IT resource requirements, in compliance withthe access policy. Implement continuous control to detect
and reconcile differences between the required policy and theeffective rights in the applications. Allows each user to selfmanage their accounts.

Strong Authentication
Reinforce a users’ security with multi-factor authentication.
Evidian IDaaS Access & Governance supports a comprehensive
list of authentication mechanisms including Evidian Push
Authentication, the latest FIDO 2 framework, and third-party
authentication delegation (via RADIUS and SAML).
• Evidian Push Authentication provides fast, convenient andfrictionless one-touch authentication from mobile devices.
• Evidian IDaaS Access & Governance supports new
passwordless FIDO 2.0 authentication.

Streamline audit and compliance
By analysing the data generated by all users in their daily
operations, the Evidian IDaaS analytics features deliver
valuable business information in an intuitive and dynamicinterface. Analytics’ pre-configured dashboards and reports
will help you identify trends and patterns. These can be on
the usage of the solution, highlight suspicious practices andcomply with internal audit prerequisites or other compliancerequirements. The Evidian IDaaS analytics features allow you todrill down into the audit information through a fool proof userinterface. This provides the ability to recover values of objects
at a given time in the past and to perform root cause analysis.
The customisation and creation of new dashboards and reports
can also be done by operators without technical knowledge.

Evidian identity and access management as-a-service
Ensures that, only the right users have access, to the right applications, at the right time, with theappropriate privileges while taking into account the evolution of their activity.
Providing a better user experience and reduced attack surface thanks to the combination of SSO andstrong authentication features.

Enforce Security

Conditional assignments

Evidian IDaaS Access & Governance was built with security
at its core to guarantee data confidentiality, prevent session
theft, identity theft, and ensure trust in protecting information
streams. Its self-service functionality allows users to manage
their passwords and enroll authenticators This avoids
exchanging sensitive information with third parties and reduces
helpdesk calls.

A certain level of accreditation (training, certification, signinga charter) may be required to be in compliance with current
legislations, insurance, company charters, etc. During audits,
compliance reports may also be requested. To meet theserequirements, Evidian IDaaS Access & Governance verifies,
when assigning rights, that a user has the required level ofaccreditation. This feature also makes it possible to take
into account changes in the level of accreditation over time:
granting rights upon obtaining accreditation or revoking themupon expiration of accreditation.

Increase Productivity
New users obtain the rights they need for their job rapidly.
When a user joins, moves or leaves, their profiles areautomatically adjusted. The IAM web portal allows users torequest additional rights as roles or requirements change.
Business productivity today is improved by having an agile
workforce. Evidian IDaaS allows users to connect fromanywhere whilst enjoying a user-friendly experience.

Personalise the access portal

Zero Trust
Authentication and access right governance are key topics
that need to be addressed to conform to “Zero Trust”. For
everyone, always and anywhere, every role must be designed
following the least privilege principle. Evidian IDaaS Access &Governance helps build the secure foundation necessary for“Zero Trust” by providing a fully-featured authentication andaccess management as-a-service solution.

Evidian IDaaS Access & Governance adapts to the needsof all organisations, regardless of size. Providing a highly
customisable standalone portal or the capacity to integrate intopre-existing corporate portals with the Evidian Connect SDK.
The navigation menu is dynamically generated to display theright Web resources associated with a specific profile. It also
gives users access to self-service facilities such as password
reset, profile management, and MFA enrolment.

Optimized management of Cloudapplications

A prerequisite for GDPR*

Implementation cost control

IDaaS Access & Governance is one key element among others
to comply with data regulation laws. The dedicated personal
data dashboards and self-service functionalities allow users
to exercise their rights freely and enable GDPR compliant
processes.

Evidian IDaaS Access & Governance enables you to easily
manage the deployment of Cloud applications like SalesForce,
Google Apps or Microsoft Office 365 etc. Accounts will only
be created when the user accesses the Cloud application,optimizing costs and facilitating deployment.
Cloud based and ready to use, Evidian IDaaS Access &Governance significantly reduces deployment time and costs.
Upgrades are fully handled by Evidian, which save time foradministrators and reduce cost for the company.

*General Data Protection Regulation

Protect REST API
REST APIs are becoming increasingly popular amongdevelopers and data scientists. They are commonly used tocreate custom applications or to open one’s IT system to theinternet. With Evidian IDaaS Access & Governance, it is easy toprotect your APIs by managing API authorization (OAuth 2.0).
You can secure publishing with access protection and ensurethat only the right resources are accessed by the right users,
using the right applications.

Acquire insights from Analytics
Evidian IDaaS Access & Governance comes with a complete
set of features to answer monitoring and compliance needs forinternal or external audit processes and regulations.

User & Right Management

Single Sign-On

Governance of joiners,
movers & leavers rights

SSO, Federation anddynamic authorization

Analytics

Audit, monitoring,
powerful dashboards& reporting

Strong Authentication
Multi-factor
authentication

Provisioning

Automatic activationand deactivation

Access & Governance from a Single Pane of Glass
The Right Identity with the Right Privileges at the Right TimeFor more information: evidian.com© Eviden. Evidian is the registered trademark of Eviden. All products, brand names, service
marks, trademarks and other names mentioned in this document are proprietary to theirrespective owners and are protected by applicable trademark and copyright laws. Evidian
reserves the right to modify the characteristics of its products without prior notice.
CT-221221-AT-FS-Evidian-IDaaS Access & Governance