EvidianQRentry Strong
authentication
via QR Code
Strong authentication using aQR Code
Evidian QRentry™ can easily replace traditional
authentication methods to protect access to Web
portals, Windows sessions and applications.
Evidian QRentry™ replaces the static password bya One-Time Password (OTP). This strong
authentication method can be used for internaland external users, including customers, partners
and employees.

Multifactor authentication for
Web portals
Evidian QRentry™ is an uncomplicatedauthentication method with a clean userinterface.
This strong authentication method reinforces

The authentication scenario is the following:”.

QRentry for Windows
Authentication
With QRentry™, your users log on to their
Windows session by scanning a QR Code withtheir smartphone.
mode, connected or not connected to thecorporate network and Active Directory.
QRentry™ works even if the PC’s network, mouse,
USB port and authentication devices are broken.
It also works for remote troubleshooting.

With Evidian QRentry™, your users authenticate
with their smartphone by scanning a QR Code™.
The QRentry™ solution is a multifactor
authentication method: I own the smartphone,
I know how to unlock it (or I have a dedicated PIN
to access the application). This solution supports
BYOD, CYOD and non-managed devices.
This authentication method does not rely on
network availability - the QRentry™ application on
the smartphone is fully autonomous, it works
even in airplane mode.

1. The user navigates to the portal home page
2. The user provides his identity by entering forexample his username
3. With his smartphone, the user scans thedisplayed authentication QR Code™
4. An OTP is displayed on the smartphone. ThisOTP is automatically sent to the portal or, if thenetwork is not available, the user enters it

5. The user accesses the portal securely.

Safety of End-User accounts
QRentry™ drastically reduces the number of
helpdesk calls as users can unlock their Windows
session themselves. When users lose a password,
smartcard or authentication token, they canunlock their Windows session themselves with asmartphone.
A business or personal smartphone can connect
in emergency mode and in accordance withsafety rules laid down by the company.
QRentry™ is the ideal partner of strong
authentication deployments, which often create“lost smartcard” or “biometrics doesn’t work”
helpdesk calls. The number of helpdesk calls
decreases dramatically – there is nothing tomemorize. Users can unlock their Windows
session themselves even if the helpdesk is out ofreach.

The OTP generator does not rely on the timeeither. It also avoids the risk of de-synchronizationof the traditional methods based on time or on acounter.
QRentry™ is based on the principle of“Challenge - Response” and is protected bydesign against the main attacks; “man in themiddle”, “key logger”, “replay password”, and“phishing”.

from the Single Sign-On (SSO) of the Evidian Web
Access Manager (WAM) solution.
Evidian WAM also provides identity federation to
your Web applications, as well as access to“Applications As A Service” and Cloud Services.
Evidian WAM is not intrusive (no need to modify
your applications). It complies with SAML andmany other authentication schemes.

Safety of local Administrator
Accounts
By protecting your PCs’ local administrator
accounts, QRentry™ makes technicalinterventions compliant with your security policy.
Technicians must scan a QR Code to access a
PC’s local administrator account. Such accesses
are logged centrally and access privileges can beremoved in a few seconds. End-users cannot
imitate the technician’s actions to get
administrator rights. QRentry™ removes the needfor quasi-public “admin/admin” passwords thatare hard to modify. Local administrator accounts
are no longer the “Achilles’ heel” of compliance.

The security system is based on a public/ privatekey (RSA2048) associated with each user. The
public key is stored in a directory.
The private key is securely stored on thesmartphone. The data exchanged between thesmartphone and the computer is within the QR
Code only.
The smartphone enrollment can be a selfenrollment or an enrollment with the presence ofan administrator.

Low-footprint deployment

Fast user adoption

••

•
•

•
•
•

SingleSign-On

End-users self-registration with theirsmartphone
No additional hardware, nor software to
install on the PC or the table
No need for network connection on the PC,
no need for cellular or data access on thesmartphone.
Uses a non – re-playable access code
All accesses are controlled and logged
centrally
Access to some applications can berestricted.

Boosts your enterprise’s innovation
image••••• Secure vault
on-premises and inthe Cloud

Provisioning• Self-Service Portal• Password reset• Delegation• Automatic
activation anddesactivation_GovernanceCT_

Evidian QRentry™ for the Web requires
Evidian Web Access Manager (WAM).
Evidian QRentry™ for Windows requires
Evidian Authentication Manager.
Evidian QRentry™ is the perfect companion
for Evidian Enterprise SSO to strengthenapplication access privileges with a strong
re-authentication.

QRentry™ can be
downloaded on:

Self-ServiceStrong
Authentication• Free users frommemorizing &typing passwords•QR Code usage is widespread among
employees
55% of US mobile users own a smartphone(Nielsen 2012).

The Right Identity with the Right Privileges at the Right TimeFor more information: Evidian.com© Eviden. Evidian is the registered trademark of Eviden. All products, brand names, service marks, trademarks and other names mentioned inthis document are proprietary to their respective owners and are protected by applicable trademark and copyright laws. Evidian reserves theright to modify the characteristics of its products without prior notice.

• Google Play• Apple Store