BlackBerry Workspaces: Authentication and Identity Connectors
2 likes356 views
BlackBerry Workspaces offers self-provisioning authentication methods, including username-password and email authentication, allowing users to securely share files. The system supports mixed-mode authentication, which enables different user groups to authenticate through various methods, improving flexibility in managing user identities. Additionally, it integrates with existing identity management systems, facilitating authentication for enterprises while ensuring that access to corporate data is controlled and secure.
BlackBerry Workspaces: Authentication and Identity Connectors
- 1. The Solution Start Collaborating Now Workspaces provides two default self-provisioning authentication methods to allow users to immediately start securely sharing files with Workspaces: 1. Username-Password The user can create his/her account through the main login screen. An email link is sent for validation. A security certificate is exchanged on the backend to prevent users from having to re-authenticate every time they enter the system. That said, users must authenticate with every new device they use to access Workspaces. Password complexity and lockout policies can be set by the system administrator. Parameter settings include: • Minimum and maximum length • Minimum and maximum lowercase characters • Numbers • Special symbols • Wrong entry attempts • Days before re-authentication • Secret questions for password recovery • Blacklist: Words that cannot be used 2. Email Authentication The user is prompted to enter an email address. As with the username and password option, an email with a validation link is sent to the user. Data Sheet Authentication and Identity Connectors Flexible options give enterprises the luxury of choice No enterprise security strategy or solution is complete without authentication. Managing and authorizing hundreds of user identities across disparate systems presents a formidable challenge for any IT organization. BlackBerry WorkspacesTM recognizes that authentication and identity management should not be a deterrent to adopting critical new technology. We make it easy for enterprises to deploy Workspaces by providing self-provisioning methods out-of-the-box and by enabling integration with existing systems to align with current policies. Connectors for Your Existing Authentication Systems Integrating with existing identity management systems makes it easy for enterprise IT to provision users in Workspaces and for users to utilize existing corporate credentials to access the system and quickly start sharing files. The Workspaces Enterprise Edition allows organizations to integrate with Identity Connectors using SAML (Security Assertion Markup Language) and OAuth. Supported enterprise authentication solutions for a Single-Sign-On experience include: 1. Active Directory (Kerberos) 2. Active Directory Federated Services (ADFS) via SAML 2.0 3. Third party authentication solutions that integrate via SAML 2.0 4. Third party authentication solutions that integrate via OAuth 2.0
- 2. Data Sheet © 2016 BlackBerry Limited. Trademarks, including but not limited to BLACKBERRY, BES, BBM and EMBLEM Design are the trademarks or registered trademarks of BlackBerry Limited. All other trademarks are the property of their respective owners. About BlackBerry BlackBerry is securing a connected world, delivering innovative solutions across the entire mobile ecosystem and beyond. We secure the world’s most sensitive data across all end points – from cars to smartphones – making the mobile-first enterprise vision a reality. Founded in 1984 and based in Waterloo, Ontario, BlackBerry operates offices in North America, Europe, Middle East and Africa, Asia Pacific and Latin America. The Company trades under the ticker symbols “BB” on the Toronto Stock Exchange and “BBRY” on the NASDAQ. For more information, visit www.blackberry.com Workspaces is the only enterprise file sync and share solution that supports mixed-mode authentication. Mixed-mode authentication allows companies to share files with different groups of users by defining different ways to enroll and authenticate them. In the course of conducting business, corporate relations are constantly in flux – alliances develop, partnerships grow, projects end and companies divest. As such, the only way to address the complex relationships enterprises have with end users is to control how to authenticate them. With mixed-mode authentication, for example, a company can implement the following authentication scheme: USER GROUP AUTHENTICATION METHOD Employees (internal) Defined full-time workspace owners Active Directory Supplier A (external) Defined part-time collaborators SAML-based single sign-on Supplier B (external) Undefined project-based team visitors Default email authentication This feature eliminates the need for companies to go through the hassle of temporarily adding part-time contractors to Active Directory. Likewise, business transactions need not be delayed as a result of an undefined supplier being unable to access product designs from the internal system. Only authorized individuals should have access to your company’s corporate data. With mixed-mode authentication, that can easily be enforced without burdening IT. Technology Partnerships Workspaces has successfully implemented integrations with the following providers (more to come): Learn more at www.blackberry.com/workspaces