®

DefenderTwo-factor authentication made easy

Overview
Our 2FA solution, Defender, enhances security byrequiring two-factor authentication to gain access toyour network resources. Defender uses your current
identity store within Microsoft Active Directory(AD) to enable two-factor authentication. It takes
advantage of AD’s inherent scalability and security toeliminate the time and expense involved with setting
up and maintaining proprietary databases. Defender’s
web-based administration, user self-registration
and ZeroIMPACT migration capabilities ease
implementation for administrators and users. Plus,
Defender hardware tokens utilize their full battery lifeand provide software tokens that never expire.

FeaturesBenefits• Enhanced security for virtually
any system or application• Leverages the scalability, security
and compliance of Active Directory• Enables token self-registration
and renewal by end users• Accelerates helpdesk resolutionof user authentication issues• Supports any OATH-compliant
hardware token• Delivers a comprehensive audit trail
for compliance and forensics

Active Directory-centric
Use the scalability, security and compliance ofActive Directory (AD) to provide a two-factor
authentication to any system, application orresource. You can take advantage of the corporate
directory already in place, instead of creating
an additional proprietary one — and save timeand money. User token assignment is simply an
additional attribute to the user object within AD.

Token self-registration
Enable users to request a hard or soft token
based upon policy defined by administrators, andthen quickly and easily assign that token to theiraccount through a secure mechanism. Token selfregistration removes the entire administrative
burden and associated costs of conventional
manual token assignment.

Help desk troubleshooter
Enable help desk and Defender administrators
to troubleshoot, diagnose and resolve userauthentication-related problems with just a coupleof mouse clicks from any browser. View a current
list of authentication attempts and routes, withassociated results, possible reasons for failures andone-click resolution steps. In addition, Defender
enables you to view user account details andassigned tokens, quickly test or reset the pin,provide a temporary token response, reset orunlock the account.

Web-based administration
Provide Defender administrators, help-deskadministrators and end-users options for token
management, token deployment, real-time log
viewing, troubleshooting and reporting using theweb-based Defender Management Portal.

Token flexibility
Make use of the full battery life of hardware tokens— typically 5 to 7 years — rather than having a
vendor-defined term. This enables you to replacetokens as they expire, in a business-asusual process,instead of to all users at one time and incurring
the costs associated with such a project. Inaddition, Defender offers smartphone tokens thatnever expire.

ZeroIMPACT migration
Defender can run in tandem with legacy systems.
All userauthentication requests are directed toDefender. If the user is not yet defined within
Defender, the authentication request is passed via
the proxy feature to the incumbent authentication
solution. This allows administrators to migrateusers to Defender as their legacy tokens expire,with virtually no overhead from an administrator or
end-user perspective.

reissue the appropriate device license when a user
decides to switch mobile platforms. Defendersmartphone tokens now offer Push-to-Authenticate
feature, requiring a single tap to authenticate.

Pluggable Authentication Module (PAM)
Specify that services and users defined on yourUnix/Linux systems be authenticated by Defenderwith its Pluggable Authentication Module (PAM).

About One Identity
One Identity delivers comprehensive cloud andon-premises identity security solutions that help
customers strengthen their overall cybersecurity
posture and protect the people, applications anddata essential to their business. Our Unified Identity
Platform brings together best-in-class identity
governance and administration (IGA), accessmanagement (AM), privileged access management(PAM) and Active Directory management (ADMgmt) capabilities. This holistic approach enables
organizations to increase the visibility, control
and protection over all their identities. Proven andtrusted on a global scale, One Identity manages
more than 500 million identities for more than
11,000 organizations worldwide. For more
information, visit www.oneidentity.com.

Universal soft tokens
with Push-to-Authenticate The Defender two-factor
authentication solution offers a wide range ofsoftware tokens for most popular and widely
deployed mobile platforms. By offering a universal
software token license, the administrator can easily© 2024 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registered trademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks,
please visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, andregistered servicemarks are the property of their respective owners. OI Datasheet-Defender-KA-93539®