Evidian Identity & Access Management

Self-Service
Password Reset
Because one security measure doesn’t fit all situations
One help desk call for a password reset costs around 15 euros and is time-consuming (about20 minutes). Three to four password resets are performed per employee per year (According
to the Gartner Research - Note T-15-6454). A self-service password reset redu-ces this cost andfrees up your IT.
Evidian Self-Service Password Resetoffers several different authentication
methods. From a web portal or fromtheir workstation, users can securelyreset their Windows passwords without having to contact the helpdesk.
Evidian Self-Service Password Resetis also available in offline mode.
Evidian Self-Service Password Reset(SSPR) identifies the user with different means: Questions and Answers,
Scan of a QR Code, Confirmation
code sent via email or SMS on mobile
and subsequently executes the resetof a new password or generates a
temporary password (TPA).
Evidian Self-Service Password Resetfeatures enable users to change
their Windows password securely(network login, Windows login),connected or not connected to thenetwork. The solution provides alarge range of authentication methods and full audit trails to demonstrate the implementation of thepassword policy.

Evidian Self-Service
Password Reset
Evidian’s primary password management features manage theexpiration and the reset of the Windows password according to thepassword policy.
Notification mails are sent before
password expiration to help the user
manage their Windows password
and when the Windows password ischanged.

A large range of Self-Service
Password Reset authentication methods:• Answering pre-defined questions
with or without an available network and without contacting of

the help desk.
• Scanning a QR Code with Evidian
QRentry App with or without anavailable network and without thehelp desk (no network connectivity is required from the mobile).
• Using a one-time password sent
via email without involving thehelp desk (network required).
• Using a one-time password sent
via SMS without involving the helpdesk (network required).
• Validating a notification received on
the user’s mobile without involving
the help desk (network required).
• Using a challenge response mechanism when the reset password
is used.

Strong password policy
enforcement with Evidian
Self-Service Password Reset

Use your company’s
existing LDAP/Active
Directory infrastructure

Evidian SSPR can enforce a strong
password policy for the network login.
You can define the network login
password format such as the type ofcharacters as well as their position,
the minimum and maximum numberof characters, etc… This policy can bedifferent regarding who is resetting
the Windows password.

Evidian SSPR relies on your existing
Active Directory. Thus, you do notneed to synchronize identities, once
installed all employees can benefit
from the SSPR feature. All the Evidian
security data is encrypted and stored
in your company directory: Active
Directory or AD LDS.

Full audit trail of network
login access and password
change with Evidian SelfService Password Reset:
The solution provides a full audit trailof WHO has access to WHAT, WHEN
and from WHERE. Reports can begenerated based on these audit
trails.
These reports can help demonstratethat your password change policy iseffectively implemented. They canalso be used to prove the return on
investment.
Reporting features can also be used
to detect accounts whose Windows
password has not been changed
for a while (risky/useless Windowsaccount).

From the login screen and a
web portal
Evidian Self-Service Windows password reset is available from a web
portal and from the login screen of
the user’s workstation. The solution
is easy to deploy and is compatible
with managed services. It fits perfectly into digital workplaces witha large range of terminals as well as
on VDI infrastructure (Citrix XenApp,
Windows RDS and VMware).

Identity proofing

Questions & Answers mechanism
can also be used to identify the user.
From the web portal, users can generate a one-time code that can beverified by an administrator.

3 reasons to manage
passwords with Evidian
Self-Service Password Reset:

Free your IT from “Password reset” time cost

Fully integrated to your Microsoft
environment, with an intuitive userinterface

Facilitate your multi-factor
authentication deployment byoffering a user-friendly fallback.
By enabling One-Time Password verifications via mobile,
SMS and e-mail for identity verification, organizations are able
to increase end-user adoption
rates of Self-Service Password
Reset up to 98%.

Evidian Enterprise SSO (E-SSO)
main features
Identity proofing

A universal solution

A non-intrusive solution You will notneed to modify any of your applications. Evidian Enterprise SSO activates single sign-on in many types ofapplications: Windows, web, terminal
emulator, etc.

Evidian Enterprise SSO can be runfrom Windows, Mac OS, Android, iOS,on smartphone, tablet, server, virtualenvironment such as Citrix, Vmware
or Microsoft, from standard and thinclient. Password vault, credentials,
personal notes and single sign-on
are always secure and available for theuser and from any terminal.

Password-free access toyour mobile applications
With Evidian Enterprise SSO forMobile device, Evidian delivers anAndroid SSO and iOS SSO solution that extends its Enterprise
Single Sign-On offer. Enterprise
SSO for mobile devices automatically enters application passwords
for you, stores securely personal
notes and passwords in your mobile
password vault, this information issecurely stored on-premises or ina Cloud and is available from yourworkstation and your mobile devices.

Turn your mobile device
into a strong authentication
deviceConvergence with remote
accesses for BYODs andnon- managed devices

When you activate your mobiledevice with a QR Code, it becomes asecure access point to your enterprisenetwork. The authentication on yourmobile device grants you a secureaccess to your applications.

With Web Acces s Manager,
Single Sign-On is extended tonon-manage d dev ice s . T hisspares you from installing agentson devices and exposing application
passwords outside your internal network. Furthermore, it enables PC,
tablet, smartphone accessing Cloud
applications using identity federation
through standard protocols such as
OAUTH, OpenID Connect, SAMLv2.

Easy deployment in yourexisting infrastructure
Evidian Enterprise SSO collects userpasswords so they do not need to beredefined. It can also be associatedwith an existing provisioning system.
You can start with only one department and then deploy SSO later on
thousands of devices. Evidian Enterprise SSO is based on an LDAP, Active
Directory or AD LDS directory. No
additional hardware is required.

Eliminate use of passwords
for remote users
Users, either internal or external, often
have remote access to applications
running in virtualized environment.
Evidian Enterprise SSO frees theseusers from memorizing and typingpasswords for these virtualized applications. For instance Evidian Enterprise SSO is certified Citrix-Ready.
Several other solutions have beencertified too, you can find them on
the Evidian Web site.

Strong authentication
Evidian Authentication Manager reinforces and manages strong authentication for Windows with smartcards
or cryptographic USB tokens, hard or
soft OTP, biometrics, RFID badges,
smartphone with QRentry, etc.

Self-Service Password Reset
A Self-Service Password request(SSPR) function allows users who
have forgotten their Windows password, or their access card, to unlocktheir accesses - even offline, with orwithout contacting the helpdesk.

Emergency Access for theWindows session
With Self-Service Password Request,
users can unlock their access themselves with an emergency procedure,
available online and offline, in self-service mode.

For more information: evidian.com

Eviden is a registered trademark © Copyright 2023, Eviden SAS – All rights reserved.

ECT-230421-CS-FS-Self-Service-password-reset_en

Business-oriented functions
With Evidian Authentication Manager, sales teams and branch office
employees can share a kiosk PC.
They can switch to their own environment in a matter of seconds, without
having to close then open a Windowssession.
When doctors do rounds in a hospitaltheir session moves with them. They
access it by tapping their radio badge
or presenting a smart card.
Traders in front office or back officeworking with a cluster of PCs canwith a single authentication, they canlock, unlock, and delegate that cluster – fully or partially, permanently ortemporarily.

Ensure that your information
system is compliant withyour policy and regulationse
You can monitor your employees’attempts to access applications andPCs. All accesses will be audited byname, including accesses to Windows
accounts and generic applications.
This will enable you to demonstratethat your access policy is observed
and fulfills its objectives. EvidianEnterprise SSO embeds a reporting
module allowing dashboard generation on key indicators such as: activity,snapshot, risk, surveillance and KPIs.
Reports can be uploaded to authorized users.