Evidian Identity & Access Management

IDaaS Access& Governance
The unique convergence of Access andGovernance from a Single Pane of Glass
Users Rights Management
Define and update the rights of all
identities, having the capability to
manage the change of these rights
over time. Implemented througha security policy, based on theextended RBAC model with its foundations of organisation and context.

Facilitate Access
Management of hybrid
infrastructures
Evidian IDaaS Access & Governance
A comprehensive identity and accessmanagement solution as a service.
Recognising the latest Self Sovereign Identity and Prescriptive Identity Access Management standards,
Evidian IDaaS seamlessly delivers azero-trust environment.
Dynamic user life-cycle and accessmanagement, integrates bleeding-edge multi-factor authentication (MFA), identity federation andSingle-Sign-On (SSO) for a superioruser experience. Todays agile working environment demands an expedient user on-boarding procedure foryour cloud-based applications.
The new IDaaS Access & Governanceconsole has been designed to be
managed by everyone through auser-friendly web interface.

Centralise Identity
Identify and manage all users basedon the need to access applications.
Ensuring employees, subcontractors, partners and customers have
only relevant access rights.

Support Identity Federation
It is possible to control who accesses
IT resources while delegating partner
identity authentication to an external
identity provider (IdP). The solution
supports SAML (Security Assertion
Markup Language) 2.0 and OpenID
Connect as well as OAuth 2.0 forSingle Sign On (SSO), identity federation and authorization control. Users
can also be provisioned between
trusted domains in more complex
business environments involving
partners and affiliates.

Provides each user profile with asecure and single point of access to allapplications. Replaces multiple existing access pages that use less secure
dedicated authentication solutions.
Supports fine-grained synchronisation for provisioning identities

Make the user the actor ofidentities and rights
Business-oriented workflow processes, allow users to manage theirown identity life cycle rights andthe governance of rights, throughaccount review processes.

Strengthen security andenable self-service
Enforce and verify policy on target
systems. Create or delete rights basedon IT resource requirements, in compliance with the access policy. Implement continuous control to detect
and reconcile differences between
the required policy and the effective
rights in the applications. Allows eachuser to self-manage their accounts.

Strong Authentication
Reinforce a users’ security withmulti-factor authentication. Evidian
IDaaS Access & Governance supports
a comprehensive list of authentica-tion mechanisms including Evidian
Push Authentication, the latest FIDO
2 framework, and third-party authentication delegation (via RADIUS andSAML).
• Evidian Push Authentication provides fast, convenient and frictionless one-touch authenticationfrom mobile devices.
• Evidian IDaaS Access & Governance supports new passwordless
FIDO 2.0 authentication.

Streamline audit andcompliance
By analysing the data generated
by all users in their daily operations,
the Evidian IDaaS analytics featuresdeliver valuable business information in an intuitive and dynamicinterface. Analytics’ pre-configured
dashboards and reports will help you
identify trends and patterns. Thesecan be on the usage of the solution,highlight suspicious practices andcomply with internal audit prerequisites or other compliance requirements. The Evidian IDaaS analytics
features allow you to drill down into
the audit information through a fool
proof user interface. This provides theability to recover values of objects at agiven time in the past and to perform
root cause analysis. The customisation and creation of new dashboards
and reports can also be done by operators without technical knowledge.

Evidian identity and access management
as-a-service
Ensures that, only the right users have access, to the right applications, at the right time, withthe appropriate privileges while taking into account the evolution of their activity.
Providing a better user experience and reduced attack surface thanks to the combination of
SSO and strong authentication features.
Enforce Security

Personalise the access portal

Protect REST API

Evidian IDaaS Access & Governance was built with security
at its core to guarantee data confidentiality, prevent session theft,identity theft, and ensure trust inprotecting information streams.
Its self-service functionality allows
users to manage their passwords
and enroll authenticators This avoids
exchanging sensitive information
with third parties and reduces helpdesk calls.

Evidian IDaaS Access & Governance adapts to the needsof all organisations, regardless ofsize. Providing a highly customisable
standalone portal or the capacity tointegrate into pre-existing corporate portals with the Evidian Connect SDK. The navigation menu is
dynamically generated to display theright Web resources associated witha specific profile. It also gives users
access to self-service facilities suchas password reset, profile management, and MFA enrolment.

REST APIs are becoming increasingly
popular among developers and data
scientists. They are commonly used
to create custom applications or toopen one’s IT system to the internet.
With Evidian IDaaS Access & Governance, it is easy to protect yourAPIs by managing API authorization(OAuth 2.0). You can secure publishing with access protection andensure that only the right resources
are accessed by the right users, using
the right applications.

Increase Productivity
New users obtain the rights theyneed for their job rapidly. When auser joins, moves or leaves, theirprofiles are automatically adjusted.
The IAM web portal allows users torequest additional rights as roles orrequirements change. Business productivity today is improved by having
an agile workforce. Evidian IDaaS
allows users to connect from anywhere whilst enjoying a user-friendlyexperience.

A prerequisite for GDPR*IDaaS Access & Governance is one
key element among others to comply
with data regulation laws. The dedicated personal data dashboards
and self-service functionalities allow
users to exercise their rights freely
and enable GDPR compliant processes.
*General Data Protection Regulation

Acquire insights from Analytics

Evidian IDaaS Access & Governancecomes with a complete set of features to answer monitoring and compliance needs for internal or external
audit processes and regulations.

Conditional assignments

Zero Trust

A certain level of accreditation(training, certification, signing acharter) may be required to be incompliance with current legislations,insurance, company charters, etc.
During audits, compliance reports
may also be requested. To meetthese requirements, Evidian IDaaS
Access & Governance verifies, whenassigning rights, that a user has therequired level of accreditation. Thisfeature also makes it possible to take
into account changes in the level ofaccreditation over time: granting
rights upon obtaining accreditation
or revoking them upon expiration ofaccreditation.

Authentication and access right governance are key topics that need tobe addressed to conform to “ZeroTrust”. For everyone, always and anywhere, every role must be designed
following the least privilege principle.
Evidian IDaaS Access & Governancehelps build the secure foundationnecessary for “Zero Trust” by providing a fully-featured authentication
and access management as-a-service solution.

User & RightManagement
Governance ofjoiners, movers &leavers rights

Optimized management of
Cloud applications
Evidian IDaaS Access & Governanceenables you to easily manage thedeployment of Cloud applications
like SalesForce, Google Apps orMicrosoft Office 365 etc. Accounts
will only be created when the user
accesses the Cloud application, optimizing costs and facilitating deployment.

Implementation cost control
Cloud based and ready to use, Evidian IDaaS Access & Governance significantly reduces deployment timeand costs. Upgrades are fully handled by Evidian, which save time foradministrators and reduce cost forthe company.

Single Sign-OnAnalytics

SSO, Federationand dynamic
authorizationAudit

Audit, monitoring,
powerful dashboards & reporting

StrongAuthentication
Multi-factor
authentication

Provisioning
Automaticactivation anddeactivation

Access & Governance from a Single Pane of Glass
The Right Identity with the Right Privileges at the Right TimeFor more information: evidian.com

Eviden is a registered trademark © Copyright 2023, Eviden SAS – All rights reserved.

ECT-230421-CS-FS-IDaaS-Access-Governance_en