Evidian Identity & Access Management

Enterprise SSO stay
focused on your business
Secure shared accounts anduser-to-user delegations
Evidian Enterprise SSO lets youremployees share the same genericaccounts securely, or delegate theiraccess to each other while being
away.
Users don’t need to reveal their passwords and are audited by name.
Thanks to a web portal, a user who isalready on leave can remotely delegate all or part of their accounts, viaa simple web page and fully comply
with the security policy.

Single sign-on for a secureaccess from anywhere
Free your users from remembering and typing passwords. EvidianEnterprise SSO provides agile single
sign-on to all users, businesses andorganizations.
By automating password management, Evidian Enterprise SSO simplifies your users’ lives and lets you drive
your security policy.

Simplify and reinforce accessto your applications
Evidian Enterprise SSO enters application passwords automatically, on
behalf of the user, and can change
them according to a strict policythat you define. Application accesssecurity can now be guaranteed.
As a result, your users naturally
comply with your security policy. Youmanage access rights and roles withjust a few mouse clicks. For example,Evidian Enterprise SSO can managetransparently hardened passwords
for each application. Through a particular policy, you can require a re-authentication or the use of a specificmethod (smartcard, one-time password, biometrics…) to allow single
sign-on to be performed on sensitive
applications.

Optimize your costs
Every call to the helpdesk generates
costs. Thanks to Evidian Enterprise
SSO, you can reduce these calls by up
to 30% as employees no longer lose
application passwords.
Moreover, you avoid the costly procedures that occur when accounts arelocked after password errors.
Evidian Enterprise SSO automaticallydraws a list of active accounts in theapplications. You will be able to optimize the associated license costs.

Ensure that your information
system is compliant withlaws and regulations
Sarbanes-Oxley, decrees on medical
confidentiality, PCI DSS or laws on
financial integrity: Evidian Enterprise
SSO will help you comply with yourlegal and regulatory requirements.
You can monitor your employees’attempts to access applications andPCs. All accesses will be audited byname, including accesses to Windows accounts and generic applications. This will enable you todemonstrate that your access policy
is observed and fulfills its objectives.
Evidian Enterprise SSO embeds areporting module allowing dashboard generation on key indicatorssuch as : activity, snapshot, risk, surveillance and KPIs. Reports can beuploaded to authorized users.

Business Oriented – Ready to use
A non-intrusive solution
You will not need to modify any ofyour applications. Evidian Enterprise
SSO activates single sign-on in manytypes of applications: Windows, web,terminal emulator, etc.

A universal solution
Evidian Enterprise SSO can be runfrom a Windows or Mac OS workstation, tablet PC, server, a virtual environment such as Citrix or Microsoft;
virtualized desktop like zero or thinclient. Evidian Enterprise SSO for
Mobile devices accompanies users
on their IOS and Android tabletor smartphone. Credentials, personnal notes and single sign-on arealways secure and available for theuser and from any terminal.

Password-free access to yourmobile applications
With Evidian Enterprise SSO for
Mobile device, Evidian delivers anAndroid SSO and iOS SSO solutionthat extends its Enterprise Single
Sign-On offer. Enterprise SSO formobile devices automatically enters
application passwords for you, storessecurely personal notes and passwords in your mobile eVault, thisinformation is securely stored in a private cloud and is available from yourworkstation and your mobile devices.

Turn your mobile device into astrong authentication device
When you activate your mobile
device with a QR Code, it becomesa secure access point to your enterprise network. The authentication
on your mobile device grants you asecure access to your applications.

Easy deployment in yourexisting infrastructure
Evidian Enterprise SSO collects userpasswords so they do not need to be
redefined. It can also be associatedwith an existing provisioning system.
You can start with only one department and then deploy SSO later on
thousands of devices. Evidian Enterprise SSO is based on an LDAP, Active

Directory or AD LDS directory. No
additional hardware is required.

Eliminate use of passwords
for remote users
Users, either internal or external,
often have remote access to applications running in virtualized environment, Evidian Enterprise SSO frees
these users from memorizing andtyping passwords for these virtualized applications. For instance Evidian Enterprise SSO is certified Citrix
Ready for Citrix XenApp, Xendesktop, Receiver. Several other solutions
have been certified too, you can findthem on the Evidian Web site.

Convergence with remote
accesses for BYODs and nonmanaged devices
With Web Access Manager, single
sign-on is extended to non-managed
devices. This spares you from installing agents on devices and exposing application passwords outside
your internal network. Furthermore,
it enables PC, tablet, smartphone
accessing Cloud applications usingidentity federation through standard
protocols such as OAUTH, OpenID
Connect, SAML.

Strong authentication
Evidian Authentication Manager reinforces and manages strong authentication for Windows with smartcards
or cryptographic USB tokens, hard or
soft OTP, biometrics, RFID badges,
smartphone with QRentry, etc.
A Self-Service Password request(SSPR) function allows users who
have forgotten their Windows password, or their access card, to unlock
their accesses - even offline, with orwithout the helpdesk.

Emergency Access for theWindows session
With Self-Service Password Request,
users can unlock their access themselves with an emergency procedure,
available online and offline, in self-service mode. This eliminates many support calls. The procedure is available
from the login windows and froma web portal, using questions andanswers to open the Windows session
or to reset the Windows password.
The security of the procedure can beenforced using captcha, a confirmation code without or with the helpdesk.
The confirmation code can be communicated by the helpdesk, via a smartphone with QRentry, SMS or email.

Business-oriented functions
With Evidian Authentication Manager, sales teams and branch office
employees can share a kiosk PC.
They can switch to their own environment in a matter of seconds, without
having to close then open a Windowssession.
When doctors do rounds in a hospitaltheir session moves with them. They
access it by tapping their radio badge
or presenting a smart card.
Traders in front-office or back-officeoften work with a cluster of PCs.
With a single authentication, they
can lock, unlock, and delegate thatcluster– fully or partially, permanently
or temporarily.

Integration with Evidian’s
IAM solutions
Evidian Enterprise SSO is part of Evidian’s Identity and Access Management solution. Therefore, you caneasily add identity management
functions to your installation.
• With provisioning, you stop distributing passwords to users. Onceapplication accounts are created,
deleted or updated, they are automatically synchronized with Evidian Enterprise SSO• Associated with policy management, Enterprise SSO enables you
to know the actual use of application accounts so you can eliminate
dormant and obsolete accounts.
And you can design your security
policy while knowing in advanceits impact on your users• Evidian Identity Governance andAdministration allows authorization governance and a full lifecycle management of identities andaccess to services, driven by a security policy combined with approval
workflows.

Single Sign-On• Free users from memorizing & typing passwords

StrongAuthentication• Secure vault on-premises and in the Cloud

Self-ServiceProvisioning• Self-Service Portal• Automatic activationand desactivation• Password reset• Delegation

Governance
The Right Identity with the Right Privileges at the Right TimeFor more information: evidian.comEviden is a registered trademark © Copyright 2023, Eviden SAS – All rights reserved.

ECT-230421-CS-FS-ESSO_en