Evidian Identity & Access Management

Web Access Manager
A cornerstone of trustworthy
Web accesses
By offering a coherent infrastructurethat secures your Web applications,
Evidian Web Access Manager makes
your organization’s security policy
more consistent, reduces management costs and accelerates youre-business activities.

Simplify and reinforce
access to your applications
With Evidian Web Access Manager,
you can easily manage the security ofyour Web applications from a single
control point. Evidian Web Access
Manager not only reinforces security thanks to strong authentication,
multi-factor authentication and finegrained access control, but it also
increases user productivity with its
customization and Single Sign-On(SSO) features. Evidian Web Access
Manager provides proof of Authentication and enables access to Cloud
applications (Office365™, GoogleApps™, SalesForce™, …).

SSO for Web applications
and dynamic authorization
Once the user is connected to Evidian
Web Access Manager, connections tomultiple websites or applications aretransparent. Passwords and authorizations are dynamically provided
by Evidian Web Access Manager foreach application. Single Sign-On
eliminates user frustration inherent tomultiple logins or password changes,and thus increases user productivity.

Centralized Web access control & strong authentication

BYOD and non-managed
device accesses

Evidian Web Access Manager protects your organization’s critical Web
applications, by controlling who hasaccess to what. Thanks to an integrated reverse-proxy, it authenticatesusers centrally using either a single
password, an integrated Windows
Authentication; a token, RADIUS,
X.509 certificates, a smartcard, or asoft-OTP generated and communicated to the user via SMS, email,
Grid card or QRentry™, as well as thenew Fido 2 standard. Once identified, users have access only to thoseresources for which they have accessrights, according to their specific profiles. Evidian Web Access Manager
enables you to chain authentication
policies and build your multi-leveland multi-factor authentications.

With Web Access Manager, multi-factor authentication and Single Sign-On
are extended to non-managed
devices. This spares you from installing agents on devices and exposing application passwords outside
your internal network. Furthermore,
it enables PCs, tablets and smartphones to access Cloud applications
using identity federation standards.

Evidian QRentry™

With Evidian QRentry™, your users
authenticate with a QR Code™ andtheir smartphone. The QRentry™
solution allows a multi-factor authentication to a Web portal based on QR
Codes from a browser on private or
public tablets or computers (BYOD,non-managed devices ...).

SAML-based multi-domain
management
Evidian Web Access Manager allows
distributed communities to interoperate and use a separate administration
for different security domains. Using
SAML accreditations generated in realtime by the user’s domain, each entity
can dynamically authorize users of atrusted domain to access its services.
This approach also enables to manage
accesses to the SaaS providers.
Users may be federated or auto-provisioned between trusted domains.
It supports SAML-based multi-domain management, as well as social
authentication: the keys to manage
and control the access of partner orclient distributed communities.

Multi-factor authentication and Web
access management for the business
Customized
user environment

Load balancing and highavailability

Integration with Evidian’sI&AM Solutions

When a user is authenticated andmanaged by Evidian Web Access
Manager, they access a single pageinterface from which they can navigate through different integrated
solutions. A customized navigation
menu is dynamically generated todisplay the right Web resources fortheir profile.

Evidian Web Access Manager’s
servers are based on efficient
high-availability and loadbalancing
mechanisms. As a result, they canincrease their load to support several
millions of users.

Evidian Web Access Manager is partof Evidian’s Identity and Access Management solution.
• With provisioning, you stop distributing passwords to users. Application accounts are automaticallysynchronized with WAM• Policy management enables you
to determine the actual accounts
usage; you can eliminate dormant
and obsolete accounts• Evidian Identity & Access Manager
allows authorization governanceand a full lifecycle management ofidentities and access to services,driven by a security policy combined with approval workflows.

This customization feature is provided
as standard with Evidian Web Access
Manager, or can be integrated withany third-party portal software.

Advanced access management and self-service
You can use a single console tomanage access rights in your company, interfaced with LDAP directories. Users can thus benefit from theself- service feature, which includes
self-registration, social authentication and registration (OAuth, OpenIDConnect), password and profile management.

Quick deployment
You can publish your Web applications easier, quicker and with morereliability and thus improve youroverall competitiveness. Evidian Web
Access Manager can be used immediately without any additional components and without modifying yourapplications.

Simplified architecture
Evidian Web Access Manager does
not require any modification of yourexisting Web services, or any plug-inon the browser side. It supports
an intelligent reverse-proxy-basedarchitecture. Not only does this architecture minimize the impact on youroperating costs, but it also gives you
full control of the entire extended
company. You can manage a unified
access to your own applications evenfor your external partners or service
providers.

Integrated and centralizedadministration
Interfaced directly with LDAP directories, Evidian Web Access Manager
supports authentication against
multiple user directories, offering full,role-based access management, withsecure account-sharing.
It offers extended audit and log toolsthat alert security managers on any
risks and registers all the accesses.
Every user and every administrator
activity is monitored and audited.

Analytics for WAM
Analytics reinforces the Evidian Web
Access Manager offer by collecting the audit trails generated by theEvidian WAM product. It sorts andenriches them in order to generate asynthetic representation in an intuitive and dynamic interface.
These capabilities will help you
meet compliance requirements,
business security policies andrisk management objectivesof the business.
Its web interface provides you withdashboards (Application Accesses,
Audit Activity, Password changes,
User Authentication Activity...) thatallow you to view and analyze events
relating to the activity of your users.
Thanks to Analytics for WAM, you will
be able to determine trends, investigate the origin of a problem, assess alevel of risk or even meet a regulatory
requirement.

A prerequisite for GDPR*
Identity and Access Management is
one element among a range of technical counter-measures to mitigate
risks related to data protection. In
addition to its access control, strong
authentication and identity governance, the Evidian Suite takes into
account the requirements for Users’
Rights in all its products’ roadmaps.
Notifications, dedicated personal
data reports and self-service functionalities allow users to exercise theirrights freely and enable GDPR compliant processes.
* General Data Protection Regulation

Strong
Authentication
Web access management and multi-factor
authentiication

Single Sign-On

Self-Service

User Management

Web SSO, Federationand dynamic authorization

End-User Self-Serviceand Self-Registration

Automatic activationand deactivation

Governance
The Right Identity with the Right Privileges at the Right TimeFor more information: evidian.comEviden is a registered trademark © Copyright 2023, Eviden SAS – All rights reserved.

ECT-230421-CS-FS-Web-Access-Manager_en