Agglomeration Community
Profile• 34 municipalities
and 92,000 residents• Budget of €150 million• Many administration
services
Users• 450 users on 10 sites• 70 applications• Virtual office with Citrix
XenServer and XenAppChallenges• Single sign-on• Increase securityof applications• Do not modify theapplications or the Citrix
infrastructure
Benefits• No application passwords
for employees• Access control andcentralized audit• Users are satisfied

The Agglomeration Community of Pays Voironnais protects thepersonal data of its citizens.
Controlling IT access in a local government body
The Voiron (Isère, France) area provides numerous services to its population through its
Agglomeration Community. Inhabitants enjoy personal services, garbage collection anddomestic help. Comittees are responsible for energy, housing, transport and tourism. Each
service to the inhabitants often requires its own application, so the Community's employees
were forced to manage up to 15 passwords each. The quality of services was at stake: toquickly respond to requests from residents, government employees need fast application
access.
This need for simplified access, expressed by employees, was also supported by the IT
department of the Agglomeration Community. It was therefore decided to seek a single sign-on
solution to simplify, but also secure accesses. The privacy of residents in effect required
streamlining password management while retaining the history of access attempts. Thesearguments convinced the Agglomeration Community senior management to give its green lightto the project.

The solution
After examining several single sign-on products, including the native Citrix solution, theAgglomeration Community chose Evidian Enterprise SSO. The strong points: the additionalload on Citrix servers is very low, ramp-up and administration are simple, the functions of thesolution are regularly updated and it is possible to evolve later towards full identity
management. Finally, this solution is very light in terms of infrastructure requirements.
"We were able to keep our Citrix XenApp and Microsoft Active Directory facility as-is without
modifying any application" said Bruno Garguet-Duport, Director of Information Systems andTelecommunications, for which the stability of the infrastructure is paramount. "EvidianEnterprise SSO fits simply in the Agglomeration Community's virtual desktop in thin client mode
- it facilitates its use, but only for authorized persons."
Now, an employee accesses the virtual desktop with a single password. Once authenticated,
he or she can launch authorized applications without seeing their login window. EvidianEnterprise SSO takes care of application password entry and changes passwords regularly,
according to security policy of the Agglomeration Community.

Case study > Local government

www.evidian.com

Deploying single sign-on"The hands-on training and skill transfer were very fast: two days were enough. We spent half aday to diagnose and install, and the rest to adapt Enterprise SSO to our applications. And theexperience gained on this model was enough to deploy the solution ourselves, with our own
internal resources" says Bruno Garguet-Duport.
A software solution, Evidian Enterprise SSO does not require installing appliances - a
significant advantage for an IT system distributed on 10 sites. Similarly, the Microsoft Active
Directory installation is not modified: SSO data is stored in a separate Microsoft AD LDS base.
"The deployment went verysmoothly. Evidian Enterprise
SSO is so easy to install that wehave set it up ourselves on ourten sites.

With Evidian Enterprise SSO, it is unnecessary to modify applications. A simple configuration
by drag-and-drop is enough in most cases. This was critical for the Agglomeration Community,
because some applications are quite old and it would be expensive to modify them. Thus,
during the initial model, IT management checked that they were able to successfully integrate
their business applications.

Users are more than convinced:
now, they would hardly accept
working without the solution!"

Convincing users

Bruno Garguet-Duport,
Director of Information Systemsand Telecommunications,
Agglomeration Community ofPays Voironnais.

A major lesson of this deployment: user adhesion is the key to a successful project. Althoughemployees are aware of security issues, those are sometimes not a sufficient argument tochange their daily routine. To do that, one must provide a real service.
The initial presentation meetings of Evidian Enterprise SSO demonstrated to users that thissimple product would eliminate their many application passwords. Another advantage: theycan add their own personal applications to the solution. As a result, the employees of theAgglomeration Community demanded that the solution be installed on their desktops.

Audits and traceability
In a local authority, ensuring the privacy of residents translates into strict confidentiality
requirements and procedures. Evidian Enterprise SSO not only protects access - it stores ahistory of all access attempts to applications and stations, password changes and administrativeoperations. Each entry contains information including the name of the employee and thecomputer he or she used. This history is stored in one central database, which greatly simplifies
audits. Thus, the Agglomeration Community performs regular analyses with BusinessObjects™
as part of safety audits.

39 A2 66LV 03

For the Agglomeration Community of Pays Voironnais, Evidian Enterprise SSO is the first bricktowards managing end-to-end identity and access management. The solution makes it possible
to add, step by step, role-based access policy management and application accountprovisioning.

© Eviden. Evidian is the registered trademark of Eviden. All products, brand names, service marks, trademarks and other names mentioned in this document areproprietary to their respective owners and are protected by applicable trademark and copyright laws. Evidian reserves the right to modify the characteristics of its products
without prior notice.