There are 3 levels of access security: user authentication, user authorization and data encryption.
Authentication – Comarch Digital Insurance integrates with existing credentials repositories:
LDAP-based directory services (including Active Directory)
Database-based (any RDBMS which provides JDBC driver, MongoDB)
Service-based (in case there is no direct access to directory service or database);
Comarch Digital Insurance can integrate with Single Sign-On with Kerberos/SPNEGO.
Authorization – the system uses a role-based approach to authorization. Each user is granted a specific role (or roles). Every role groups a set of rights, granting access to predefined system functionalities. These settings are configurable through the Business Administrator App.
Data encryption – recommended server configuration ensures an encrypted connection (via the HTTPS protocol) for the communication between the internet browser and the server. The connection between the application server and all databases is encrypted via SSL/TLS. For the rest, data encryption is supported.