Integrated Single Sign-On

An Identity & Provisioning Management (IPM) system adds on the single sign-on solution which offers many advantages for the administration of authorizations.

The bi-Cube^® SSO is a single sign-on solution which was also developed by “Institut fuer System-Management” (iSM). Through the modular bi- Cube^® architecture is the connection of single sign-on solution very simple and effective. Both solutions use the same data base and together they are being further developed. The IT administrators use the same surface with minor differences and therefore their training only lies within a short extent.

After a successful authentication at the windows operating system, bi-Cube^® SSO applies an automatic access to all other applications. This way the employee does not have to memorize passwords or user names etc.

A dual (intense) authentication is suggested by iSM. That’s why bi-Cube^® SSO offers an additional authentication by using biometrics or the bi-Cube^® token as an enhancement. For example, with the access of a windows operating system the authentication is established by a fingerprint of the user. Additionally a Public Key Infrastructure (PKI) combined with a so called Smart Card can be implemented. There is no necessary technical acquisition between SSO and a PKI. Anyhow the goal is reached with a dual authentication. We suggest preferably to use the PKI/smart card solution with the Microsoft-PKI, because the Microsoft-PKI is included in the server operating system, free of charge.

The advantages of flexible single sing-on solutions are:
Increase of security

• Only one application to access the operating system will launch all other necessary applications
• Minimization of password chaos. No more written paper notes to memorize password.
• Intensification of password rules
• Additional protection with a biometrical component

Relief for administrators with:

• central administration
• Automation of processes
• additional component, for example a password-self-service

Increase of comforts through:

• access for all applications via SSO-client server
• simple usage and user friendly surface

High technical functions ability with:

• components like ‘four eye principal’ or fast user change
• connection with many fingerprint reading devices