Identity System

Centralized system for employees and client’s authentication

Creating a single-point, centralized user accounts storage:

• Administrators update Identity System settings, enabling users to access their company's apps with specified rights, roles, and groups.
• Managing password policies, including password complexity and expiration time to ensure apps do not allow weak passwords (e.g., 123456).
• With Single Sign-On technology users no longer need to memorize credentials for each app. They can enter their login and password only once and start working with all apps.

Benefits:

• Increases the efficiency of the information security officer's work.
• Reduces the number of calls and messages to the support service.
• Ensures less risk of information security, as the apps no longer store the records of fired employees who accidentally were not blocked.
• Collects all information about user actions in a single place due to the centralized audit

Services protection via the combination
Identity Gateway + Access Manager

Protecting services with the combination of Access Manager and Identity Gateway provides reliable infrastructure safety. Access tokens in user requests are required for protected services, and token safety needs special attention. Identity Gateway provides access token storage to prevent the tokens from getting out of the company's IT infrastructure.

Benefits:

• Decreases compromise risks for access tokens, as the tokens are not transferred to services users
• Protects services with access tokens
• Provides differentiation of access levels depending on the content of access token.

Authentication plugins

In case when your app needs special logic for registration or authentication, any custom scenario can be implemented with authentication plugins. It is possible to apply authentication for users and clients, mobile devices and ATMs.

Benefits:

• Provides customized scenario for any type of authentication required by your business.

Providing controlled access to the company API

Access Manager allows you to control access to the company's internal APIs by external partners: This includes:

• Quick connection of new users or blocking existing ones;
• Setting an access level for each partner, for example, a privileged client could obtain read and customize permission, while other clients could only use reading rights.