RSA Security Teams To Assuage Password Pain

Welcome Guest. | Log In| Register | Membership Benefits

June 07, 2004 (9:40 AM EDT)

RSA Security has teamed up with a new strategic partner--Passlogix Inc--to develop a solution to the myriad problems caused by the scores of passwords enterprise users typically must deal with. The RSA solution is called Sign-On Manager and it can be integrated into existing RSA products.

"For instance, we integrate Sign-On Manager with RSA SecurID," said Herb Mehlhorn, RSA senior product manager, in an interview. "The basic value is the combination of single enterprise sign-on with a strong authentication solution." The solution was announced Monday.

The new feature addresses the growing problem represented by the multiplicity of passwords used by the typical enterprise user, who often forgets or loses some of those passwords. The Gartner Group, for instance, has said that user ID problems can account for 15 to 35 percent of help-desk call volume. The cost of resetting a password is typically estimated at $25 per call.

Mehlhorn noted that password-management and security issues are taking on more importance with the rise of new regulatory legislation mandating improved compliance, including Sarbanes-Oxley, Health Insurance Portability and Accountability Act (HIPAA), and Gramm-Leach-Bliley. Sign-On Manager will help enterprises meet some of these new regulatory requirements.

RSA Sign-On Manager gives users access to multiple Windows client/server, Web, or mainframe applications without having to re-authenticate each application. With the new product, authentication standards can be set at various levels, covering different authentication products and services, as well as different levels of security.

"RSA Sign-On Manager delivers strong ROI through central management and the ability to scale to tens of thousands of users," said Mehlhorn. "[It] includes a centralized management user interface that provides the needed power and flexibility for large distributed enterprises." The product has backup and recovery features that can be managed from a centralized server. In addition, administrators can manage the password features from a central location.

Mehlhorn said the authentication sign-on techniques should save time and money for enterprise users. He noted that 15 percent of enterprise users regularly dial-in to their enterprise network from remote access points. He expects Sign-On Manager to be used heavily by the 14 million users who already utilize RSA's SecurID, a smart card with cryptographic features.

Scott Bonnell, Passlogix' director of business development, said RSA licensed Passlogix' v-GO SSO technology to support RSA's Sign-On Manager. In addition to operating with RSA's SecurID, the sign-on technology can authenticate passwords in a range of choices, including RSA Smart Card, RSA USB Authenticator, RSA Keon digital certificates, or fingerprint-based biometrics. Bonnell added that Passlogix has an agreement with the U.S. Postal Service to use 150,000 units of its password sign-on features.