OneSign®
Authentication Management

Strong Authentication Made Easy

As your company attempts to implement a stronger level of network access security to meet regulatory compliance demands, you require a variety of multi-factor options and clear visibility into which employees accessed what, when and how in order to provide bulletproof audit capabilities. User authentication satisfies that requirement.

The need for organizations to implement multiple types of strong authentication options is driven by user environment, habits and workflow. All authentication options are not created equal – if more convenience is needed for users within the office – the choice could be biometrics. For remote users who access the corporate network through a variety of points – there are one-time password tokens. And, some organizations will want to leverage the building access cards their employees already carry for network access as well. But managing all these disparate user authentication options within one environment has been virtually impossible – until now.

Imprivata OneSign^® Authentication Management is a unique user authentication solution that integrates a broad range of flexible and powerful strong authentication types – all managed from within a single administrator framework. OneSign eases the cost and complexity of managing independent systems and provides a central location for reporting access events across all strong authentication options, reducing the burden of regulatory compliance. View the OneSign AM flash demonstration NOW!

Flexible Authentication Options.
OneSign Authentication Management provides native support for a broad range of plug-and-play authentication options such as One-Time-Password (OTP) tokens (including built-in management support for VASCO^® DIGIPASS^®) finger biometrics, smart cards, proximity cards, building access cards, and USB tokens. Simply plug them into your workstation and you are ready to go.

Consolidated Reporting.
With OneSign Authentication Management, you can easily report in real-time an aggregated view of when, how and from where an employee gained access to the network. By having all access information available at the push of a button via standardized reporting, OneSign Authentication Management provides critical value in helping you rapidly respond to audit inquiries that may otherwise require manual viewing and collation of independent system logs. When adding OneSign Single Sign-On, you can also incorporate reporting on user access events to applications as well.

ROI. Right Out-of-the-Box.
The power of OneSign Authentication Management is that it’s all in one box. OneSign Authentication Management is designed to be affordable and easy to adopt. Purpose-built for flexible and rapid enterprise deployment, OneSign’s appliance-based approach to user authentication dramatically minimizes implementation time, infrastructure needs, and installation costs – accelerating your return on investment right out of the box.

OneSign Authentication Management can also be purchased alone or as part of The OneSign Platform™, the technology solution that is helping more than 700 companies around the globe to achieve their most pressing Identity and Access Management security mandates with one easy, smart and affordable appliance-based solution.

Key Features of Imprivata OneSign

Broad Support for Strong Authentication
OneSign Authentication Management provides native support for a broad range of user authentication options including:

• OTP tokens (including built-in support for VASCO DIGIPASS)
• Finger biometrics
• Windows smart cards
• National ID smart cards
• Active and passive proximity cards
• Building access cards
• USB tokens

Physical/Logical Convergence

Imprivata OneSign^® Physical/Logical provides system level integration between both security environments to enable one comprehensive, converged policy for allowing or denying network access based on an employee’s physical location and badge events, role, and/or employee status. Learn more about OneSign Physical/Logical today.

Monitoring and Reporting

OneSign records all local and remote network authentication and application access events in a centralized database. Exportable reports provide an audit trail accessible to the OneSign administrator.

Built-in VASCO DIGIPASS One-Time-Password Authentication
OneSign Authentication Management and DIGIPASS by VASCO combine to replace network passwords with two-factor authentication that secures access for users regardless of whether they are online and connecting to the local network, offline and logging onto their laptop, or accessing network resources from a VPN. Learn more here...

Built-in Support for Finger Biometrics
OneSign Authentication Management provides native support for Dell, Lenovo and other laptop PC’s that embed the UPEK TouchStrip scanner, as well as support for external UPEK TouchStrip USB readers thereby simplifying the user logon experience by removing the need for users to type their username or password.

Built-in Support for Active Proximity Cards
OneSign Authentication Management provides native support for the Ensure Technologies XyLoc active proximity cards and readers in order to provide comprehensive walk-away security.

Built-in Support for Passive Proximity Cards
OneSign Authentication Management provides native support for the RF Ideas PCprox USB reader that supports a variety of smart cards technologies, including HID, Casi-Rusco, Indala and Mifare.

OneSign FastPass™ - One Touch Login to Information at Any Workstation

OneSign FastPass provides fast and secure user authentication to workstations with the touch of a fingerprint or proximity card ID badge on a reader. The user doesn't even have to type his user name to jump back into his session on any workstation. Users rave about the convenience of this feature. Learn more here...

ONESIGN SECURE WALK-AWAY™- Protecting Unattended Desktops from Unauthorized Access

OneSign Secure Walk-Away closes a critical security gap in the protection of confidential information assets by automating the process of securing the desktop when a user ‘walks away’. Once a user has securely authenticated to the desktop using OneSign Authentication Management, OneSign Secure Walk-Away uses a combination of computer vision, active presence detection, and user tracking technologies to identify an authenticated user and automatically lock the desktop upon their departure. Learn more here...

Application Transaction Level Strong Authentication
The Imprivata OneSign ProveID capability allows an application to leverage OneSign’s strong authentication services to positively identify a user at any point in the application workflow. Examples of ProveID in use include a banking environment where positive identification of a user is required prior to executing a financial transaction, and a healthcare environment where positive identification of a user is required at the point of drug disbursement.

Built-in RADIUS Host for Remote Access Authentication
OneSign Authentication Management contains a built-in RADIUS host for handling remote access authentication using VASCO DIGIPASS tokens, SecurID or Secure Computing tokens or domain passwords.

Further Reading

•Imprivata OneSign together with VASCO DIGIPASS

•Read more about Imprivata OneSign FastPass for biometrics or smartcards