Evidian Identity & Access Management

Authentication
Manager Businessoriented ready to use
Simplify multi-factor authentication deployment
Evidian Authentication Manager
simplifies the deployment andday-to-day management of strong
authentication:

Business-aware multi-factor
authentication management
for the whole organization
Secure access to your PCs and servers in any situation. Cover all authentication scenarios, whether a user
accesses one or several PCs, or several users share one PC.
Passwords are a weak point in manyauthentication policies. Shared orsimple Windows passwords are arisk of intrusion, and make it almost
impossible to precisely audit Windows account usage.
Strong multi-factor authentication
solves these issues by replacing
passwords with devices or biometrics. But in the field, strong authentication faces operational constraints.
To deploy and manage thousands ofusers, you must cover all use cases or risk hindering employees in their
daily tasks.

Dedicated business features
With Evidian Authentication
Manager, sales or branch office
employees share a PC and accesstheir own environment in a few seconds without having to log on and offto Windows.
Doctors keep their own Windows session when roaming thehospital premises.
From one PC, front desk traders andcontrol room technicians can open,lock, unlock, or close a set of PCs using
their multi-factor authentication.
An employee can delegate access totheir locked sessions permanently ortemporarily (optionally with a read
only screen) for one or several PCs.
Itataese veliqua ecaborest laborerum, quos dolut rem aut accuptatiae.

• Central management of accesspolicy• Group-based authentication
profiles• Integrated card administration(issuance, inventory, black list...)• Centralized audit of all accessattempts to PCs.
By choosing Evidian Authentication Manager, you are not bound toa technology. You deploy the rightauthentication in the right place.
Your authentication policy is applied
from a central point for all methods.

Reduce usage costs
Thanks to Evidian Authentication
Manager, from a single console, help
desk staff unlock or remove access
immediately for any authenticationmeans (password, smart card, RFID,
biometrics, One-Time Password(OTP)…).
Moreover, users unlock their Windows access using Self-Service Password Request (SSPR). This eliminates“unlock me” support calls.

Leverage on your existing
infrastructure
Evidian Authentication Manager
relies on your LDAP or Active Directory where security data is stored
encrypted: users are not duplicatedand no appliance is needed.

Microsoft smart card logon
Evidian Authentication Manager
is fully compatible with smart cardlogon and can provide you with efficient emergency access procedures.

IGEL thin client integration

Easy deployments

Evidian Authentication Manager andIGEL make authentication on thin clients easier, quicker and more secure.
Users can access Linux-based thin clients via RFID or smart card.

Start with one department andextend Evidian Authentication Manager later to thousands of users.
Evidian Authentication Manager
runs on Microsoft Windows, Citrix
XenApp and Window Terminal
Server environments.

Already authenticated employees
can quickly and securely access theirsession (Citrix XenApp and MicrosoftRDS) on any thin client during theday simply by presenting their RFID
badge or inserting their smart card.

Business Oriented – Ready to use
A wide range of supported
authentication methods
Evidian Authentication Manager supports most leading authentication
technologies:• Smart cards and security tokens,with or without certificates• Fingerprint and vein biometrics• RFID radio tag• One-time passwords (OTP)• Questions and answers sequence• Login / password.

Shared account management
Users can securely use generic
Windows accounts. They don’teven need to know the passwords;
audit events contain their authentication information.

ActiveSync integration

Evidian Authentication Manager
includes card administration features
allowing you to manage the devices’
lifecycle from a central point. You canissue or lend a card to an employeewith stored data and certificates. You
can also suspend or blacklist a card.

Evidian Web Access Manager
can control mobile accesses tothe e-mailing system, using theActiveSync protocol without requiring the Windows password on themobile device. In this case, Evidian
Web Access Manager uses the Windows password known by EvidianAuthentication Manager to authenticate on the mail server. The combination of Evidian Authentication
Manager and Web Access Manager
allows you to give users access tomail servers without compromising
the Windows passwords.

Delegation initiated bythe user

Strong authentication via QR
CodeWhen users plan to be away, Evidian
Authentication Manager allows themto delegate access to their PC under
the control of the security policy.

With Evidian QRentry, users log
on to Windows by simply scanning a QR Code with their mobiledevice. This access is available
whether you are connected or not tothe corporate network.

Manage the authentication
lifecycle

Emergency Access from theWindows logon screen
The Evidian Self Service Password
Request (SSPR) feature reduces
usage costs by allowing users toreset their password by themselves
or with a challenge provided by
the helpdesk. When this featureis enabled, users answer personalquestions. If they forget their meansof access, they answer questions,either to reset their password or toaccess their Windows session.
When users reset their password
using SSPR, this password can be:• A temporary password: allowed fora defined duration• A password valid only on the PC
where the reset has been requested• The definitive password of the user.

... Even offline!
Mobile users can reset their accessfrom their PC even if they are notconnected to the corporate network.
As an alternative solution to questions and answers, QRentry can also
be used as an emergency access.

Emergency Access from theweb portal
Just as from their workstation, users
can connect to the Authentication
Manager Web portal to answer questions or activate emergency access.
The Web portal can also be used toreset their password with:• A confirmation code sent to theuser by mail or SMS• QRentry as an authenticationmeans.
Security of the emergency accessprocedure can be enforced using
a captcha.

Ensure that your information
system is compliant withlaws and regulations
Signed audit trails related to accessand administrative actions are stored
into a central database.
Authentication Manager helps you
to comply with your legal and regulatory requirements such as Sarbanes - Oxley, decrees on medical
confidentiality, PCI DSS or laws on
financial integrity.
You can monitor your employees’attempts to access PCs. The audit
events contain user identification.
This enables you to demonstratethat your access policy is observed
and fulfills its objectives.

Advanced Reporting Module

Integration into Evidian IAM
solutions:
Evidian Authentication Manager ispart of Evidian’s identity and accessmanagement solutions. This ensuresthe convergence of authenticationand identity lifecycles.
• With Evidian Enterprise SSO,
launch your applications without
any additional password• With Evidian Web Access Manager,
users access their web applications from any browser, securely,
without re-authenticating to eachapplication• Evidian Identity Governance andAdministration allows authorization governance and a full lifecycle management of identities
and access to services, driven by
a security policy combined withapproval workflows.

Evidian Authentication Manager
embeds a reporting module allowing
dashboard generation on key indicators such as: activity, snapshot, risk,surveillance and KPIs. Reports canbe downloaded by authorized users.

Single Sign-On• Free users from memorizing & typing passwords

StrongAuthentication• Secure vault on-premises and in the Cloud

Self-ServiceProvisioning• Self-Service Portal• Automatic activationand desactivation• Password reset• Delegation

Governance
The Right Identity with the Right Privileges at the Right TimeFor more information: evidian.com

Eviden is a registered trademark © Copyright 2023, Eviden SAS – All rights reserved.

ECT-230421-CS-FS-Authentication-manager_en