Hitachi ID Password Manager: Enrollment, password reset and password synchronization
1 like1,242 views
The document outlines Hitachi ID Password Manager's capabilities in managing user credentials across various applications, emphasizing self-service password resets and security question enrollments. It highlights the benefits such as cost savings, improved security, and ease of access through multiple platforms. Additionally, it includes animations demonstrating key functionalities and advantages of the system.
Hitachi ID Password Manager: Enrollment, password reset and password synchronization
- 1. 1 Hitachi ID Password Manager Managing the User Lifecycle Across On-Premises and Cloud-Hosted Applications Integrated credential management for users: passwords, encryption keys, tokens, smart cards and more. © 2012 Hitachi ID Systems, Inc.. All rights reserved. 1
- 2. Slide Presentation 2 HiPM Animated Demonstration The following animations illustrate core Hitachi ID Password Manager user interfaces and processes: • Security question enrollment: • SSPR with GINA Extension: – A user authenticates and – A locked out user resolves his own completes his personal profile of problem, from the login prompt, questions and answers. using a GINA extension. • Alias enrollment: • SSPR with Vista credential provider: – A user attaches non-standard login – A locked out user resolves his own IDs to his profile. problem, from the login prompt, • Password expiration: using a Windows Vista credential provider. – A user is invited, via e-mail, to • Assisted password reset: change soon-to-expire passwords. • Self-service password reset (SSPR) – A help desk analyst signs in with an using Secure Kiosk Account: RSA SecurID token and resets a caller’s password. – A locked out user resolves his own • PIN Reset for an RSA SecurID token: problem, from the login prompt, without client software deployment. – A user resets his RSA SecurID token PIN with HiPM. 3 Locked out Windows 7 user resets own password Animation: ../pics/camtasia/psynch-2/win7-credential-provider.cam 4 Locked out Windows XP user resets own password Animation: ../pics/camtasia/psynch-2/5-password-reset-gina.cam © 2012 Hitachi ID Systems, Inc.. All rights reserved. 2
- 3. Slide Presentation 5 Locked out Windows user resets own password (no software foot- print) Animation: ../pics/camtasia/psynch-2/4-password-reset-ska.cam4 6 Enrollment of security questions Animation: ../pics/camtasia/psynch-2/1-qa-enrollment.cam 7 Enrollment of non-standard login IDs Animation: ../pics/camtasia/psynch-2/2-alias-enrollment.cam 8 RSA SecurID Self Service Token Support Animation: ../pics/camtasia/psynch-2/8-rsa-token-reset.cam 9 Reminder to change passwords Animation: ../pics/camtasia/psynch-2/3-password-expired-email.cam © 2012 Hitachi ID Systems, Inc.. All rights reserved. 3
- 4. Slide Presentation 10 Assisted Password Reset Animation: ../pics/camtasia/psynch-2/7-password-reset.cam 11 Unlocking Windows Users Approach Pros Cons Do nothing (call help desk). Zero setup. Zero benefit. Domain secure kiosk account. Easy setup. No client Generic, no password domain software. account. Personalized SKA accounts. No "guest" domain account. Lots of specialized domain accounts. Local secure kiosk account. No "guest" domain account. Client software deployment. GINA wrapper DLL; Vista More user friendly. Risk of workstation damage if Credential Provider improperly installed. Local software + dedicated Enables password reset for Client package, at least to VPN. mobile or at-home users who mobile. are locked out. IVR access. Simple setup, no client Cannot manage local software. passwords. Users don’t want to talk to a machine. © 2012 Hitachi ID Systems, Inc.. All rights reserved. 4
- 5. Slide Presentation 12 HiPM Benefits Cost Savings Improved Security Synchronization: Eliminates 60% to Policy: Enforce 50+ 90% of password password rules, problems. globally. Self service reset: When adopted by Synchronization: Fewer written 40% to 70% of passwords. users, diverts Authentication: Block social problem resolution engineering attacks away from the help on the help desk. desk. Delegation: Eliminate admin Assisted reset: Shortens remaining passwords at help password reset HD desk. calls by 50% or Accountability: Log all more, to about 1 authentications, minute/call. password changes. PIN reset: Users can resolve Encryption: Protect sensitive their own SecurID data on disk and problems. network. 13 Summary An integrated solution for managing credentials: • Immediate security benefit: password policy, help desk caller authentication. • Low deployment cost, minimal ongoing investment, significant IT support savings. • Always accessible: – Web browser on PC, phone or tablet. – Windows login prompt. – Pre-boot encryption password prompt. – Phone call / IVR. – Available at work and while off-site. • 110+ connectors included. Learn more at Hitachi-ID.com/Password-Manager 500, 1401 - 1 Street SE, Calgary AB Canada T2G 2J3 Tel: 1.403.233.0740 Fax: 1.403.233.0725 E-Mail: sales@Hitachi-ID.com File: PRCS:pres www.Hitachi-ID.com Date: March 1, 2012