EADS AstriumProfile• EADS Astrium designs
launchers and spacecraft.

The #1 European supplier of space systems launches IAM
deployment with Evidian.
Securing application access in a high-tech company

Users• 12,000 IT users in 5
countries: Germany,France, Spain, theNetherlands and the UK.
• Tens of industrial partners
worldwide.

Astrium (a subsidiary of EADS) is Europe’s #1 provider of space technologies – and theworldwide #3. It builds the Ariane space launchers, and developed other high-profile projects
such as the Mars Express and Huygens interplanetary probes and the Jules Verne vehicle thatservices the International Space Station.

Challenges

As a supplier of high-tech space systems, EADS Astrium coordinates the work of tens ofindustrial partners across Europe. Therefore, the IT department manages conflicting objectives.
First, it must ensure data confidentiality to maintain the company’s competitive edge. Second, it
must give partners and suppliers access to specific IT applications to efficiently share
information.

• Securing IT access for
employees and industrial
partners.
• Automate applicationaccount management.

For these reasons, EADS Astrium wanted to replace their manual process for granting
application access with an integrated, end-to-end system. Creating and modifying an accountshould only take minutes, and departing employees should see their accounts automaticallyterminated.

Benefits

And once an application account is available, employees and partners should access it
painlessly, without having to remember tens of passwords.

• SSO for Astrium’s
employees worldwide.
• Help-desk costs
significantly reduced.
• Secure single-login portal
for partners.
• Account provisioning
improves service levels.

“We wanted to simplify access right management. In addition, we wanted to reduce the cost ofhelp-desk calls due to login problems”, says Frédéric Babin, technical manager of EADS
Astrium information security. “As we have both civilian and military activities, another challenge
was to introduce role-based management so that a user can login with one of two identities, acivilian one and a military one, on the same PC”.

End-to-end access management
EADS Astrium deployed Evidian Enterprise SSO internally, along with Evidian’s provisioning
system. On user’s stations, Evidian’s software provides single sign-on access to client/server
and web applications, while Evidian User Provisioning automates account creation,
management and removal.
In addition, two secure web portals were established, based on Evidian’s Web Access
Manager. With the first portal, partners access web resources with client-less SSO. The second
portal is designed for EADS Astrium employees.

Case study > Industry

www.evidian.com

Integrated single sign-on and provisioning
For such a complete system, a major requirement was integration – the components should
work together natively, without duplication of administration tasks.
After an exhaustive market study, Evidian was chosen for its ability to provide all neededfeatures within a coherent, integrated environment. Evidian’s IAM Suite provides secure SSO(both client-based and web-based) and provisioning, while sharing the same encrypted
security data.
“In our field, security is critical.
We knew we had to ensurehigh-end, personalized access
control and network security.
Evidian helped open interaction
internally as well as with ourglobal business community,
while still ensuring the complete
protection of our information
assets.”Bernard Le Goaziou,
Chief security officer,
EADS Astrium.

All components are managed from central stations, from account creation to employee SSO
and web SSO. In just a few clicks, the 4 administrators define a security policy centrally, createand delete accounts, and grant and remove SSO access to applications.
Account management is automated for several critical resources on Windows and Unix,
including Microsoft Exchange, SAP and industrial applications.
Two portals (for employees and partners) are installed in a fault-tolerant configuration, on
standard servers. If a server fails for any reason, another one will still serve page requests.

Improving security and convenience
By centrally managing access, security is increased. The project also made end-users more
efficient with single sign-on, and the administration workload for systems and application wasreduced.
Over 7,000 employees access their stations and applications daily with secure SSO; extension
to the rest of EADS Astrium’s sites is underway. And partners have always-on access to EADS
Astrium’s web applications securely, with no need for an SSO client.

39 A2 12LV 06“Our internal audits have demonstrated that single sign-on and reinforced password
management have significantly improved security” says Frédéric Babin. “This was a reason we
decided to extend Evidian’s system worldwide, including Germany. Accesses andadministration events can be audited centrally, and we can quickly remove access rights if anincident were to occur.”© Eviden. Evidian is the registered trademark of Eviden. All products, brand names, service marks, trademarks and other names mentioned in this document areproprietary to their respective owners and are protected by applicable trademark and copyright laws. Evidian reserves the right to modify the characteristics of its products
without prior notice.