The OneSign®
Platform

Compliance. Convenience. Convergence:

Achieve your most pressing Identity and Access Management mandates with one smart platform.

On any given day, your company is working overtime to:

• securely authenticate identities onto corporate networks,
  
• manage a multitude of unique application passwords for hundreds, or thousands, of employees,
  
• generate comprehensive user access reports to address regulatory compliance demands, and
  
• safeguard your property – whether buildings, networks or application data.
  

It’s no wonder that Identity and Access Management (IAM) projects have been viewed as complex, expensive, and, frankly, a nightmare to implement…until now.

Introducing OneSign® – the platform that makes identity and access management simple.

The beauty of the OneSign Platform is that it integrates the historically complex, fragmented aspects of your corporate security strategy with one appliance-based approach. OneSign seamlessly integrates strong authentication, application single sign-on, physical access control, and event reporting to provide one enterprise-wide automated employee information access policy managed and enforced within a single, easy to use administrative framework. Whether you have 200 or 200,000 employees, the OneSign Platform effortlessly solves some of the most critical security, regulatory and convenience issues:

• COMPLIANCE: You need visibility into the who, what, where and when of employee access activity. When did an employee enter a facility or room, when did they logon to the network, what applications did they access and when did they exit? With OneSign, all this identity-centric access data is centrally captured and provided in standard reports with the push of a button to easily address regulatory compliance mandates and audit needs.
• CONVENIENCE: The average employee has between 12-15 different applications that they access in their daily course of business. Each application may require a separate password which must then be changed on a regular basis. The net result is that password management adds up to huge headaches and frustration. And, with studies consistently showing that over 60% of all IT Help Desk calls are password related, the need for change is imminent. OneSign helps to eliminate the password management problem, directly increasing security, while improving user convenience and productivity and reducing Help Desk support costs.
• CONVERGENCE: Companies have multiple silos of security. By centrally mapping an employee’s multiple corporate IT and physical security identities with their respective access policies and events, OneSign confirms an employee’s physical location, validates their identity, dynamically enforces and enables information access policy, and then reports all access events in real-time. By leveraging all of an organizations existing access systems, OneSign provides a significantly enhanced and holistic security infrastructure.

The OneSign® Platform
Purpose-built for rapid enterprise deployment, OneSign’s appliance-based approach dramatically minimizes implementation time, infrastructure needs, and installation costs – accelerating your return on investment and lowering your on-going support costs. The OneSign Platform also integrates with systems you already have in place, leveraging and extending the value of your existing investments in security throughout the enterprise.

The platform consists of three specific modules that can be licensed individually or as one complete solution. Our flexible, affordable approach allows you to adopt the right level of security for your organization at just the right time – all with a simple licence key upgrade.

OneSign Authentication Management replaces Windows and remote access VPN passwords with a broad range of strong authentication options, including integrated management for One-Time Password (OTP) tokens, finger biometrics, smartcards, proximity cards and building access cards. With OneSign, you can mix and match various authentication modalities to suit user needs regardless of whether accessing the network locally, via remote VPN, or while working offline.

OneSign Single Sign-On quickly and effectively solves password management, security and user access issues for employees by enabling SSO for ALL applications – legacy, client/server, Windows, JAVA, and web – without requiring any custom scripting, modifications to existing directories, or inconvenient end-user workflow changes.

OneSign Physical/Logical integrates network and building access systems to provide a single consolidated user identity. Organizations can now implement one comprehensive, converged policy for allowing or denying network access based on a user’s physical location, role, and/or employee status.

OneSign is shipped as a redundant hardware pair - there is nothing else to buy, install or maintain.Imprivata’s scalable web service-based architecture gets you up and running quickly and easily, without the complexity and costs associated with buying, implementing, and managing independent and non-integrated alternatives. And, Imprivata’s distributed management and failover architecture ensures that your identity information can follow you anywhere in the enterprise while providing built-in business failover, continuity and disaster recovery capabilities. The power of OneSign is that it’s ALL in the box.

The Imprivata Difference - Easy, Smart and Affordable
Award-Winning Technology & Vision:

• Top ratings in product reviews at InfoWorld, SC Magazine, PC News Weekly, Federal Computer Week, IT Week and Web Week
• An Information Security “Product of the Year”
• Selected as Best Single-Sign-On Product at the SC Magazine Awards in Europe
• CTO David Ting voted by InfoWorld as one of the top CTO’s of the year
• Rated in the leader quadrant of the Gartner 2007 Enterprise Single Sign-On Magic Quadrant

Appliance-Based Packaging

• Encrypted database
• Locked ports
• Hardened operating environment

Plug-and-Go

• Easy to install, configure, deploy and manage
• Point and click integration – instead of expensive scripting - the OneSign Application Profile Generator (APG) enables all enterprise applications for single sign-on and self-service password reset without scripting, building custom connectors or modifying existing code.
• Built-in failover and redundancy
• Choice of strong authentication options by user, environment, situation

Out-of-the-Box

• Nothing else to buy, install or manage
• Built-in monitoring and reporting
• No change to existing infrastructure – directories, applications or workflow
• Built-in RADIUS host for remote authentication
• Seamless upgrade between the capabilities of the OneSign Platform

Scalable Architecture

• The OneSign Platform can scale to handle environments with an unlimited number of users
• In a multi-site enterprise, users can roam among sites and receive the same single sign-on and authentication management services throughout the enterprise
• Distributed architecture means stronger business continuity, availability and disaster recovery capabilities

Lowest TCO

• Minimal consulting/services costs
• Low end user training/support costs, with no disruption to user workflow

Greatest Value

• Choice of strong authentication option - built-in support for a wide variety of strong authentication including finger biometrics, smart cards, One-Time Password tokens, and building access cards
• Physical/Logical Convergence - take advantage of physical access events to enable or disable network authentication – eliminating tailgating, adding another form of authentication, or deprovisioning employees or contractors who have left the organization
• Consolidated Compliance Reporting - Monitoring physical, network and application access event data in one place for quick and easy compliance reporting