Tivoli Access Manager for Enterprise Single Sign-On

IBM Tivoli® Identity Manager

IBM Lotus Sametime 7.5

License Guide

Tivoli Access Manager for Enterprise Single Sign-On

Download White Paper (PDF)

Download Datasheet (PDF)

The complexity and number of user names and passwords employees must manage on a daily basis are increasing sources of frustration and lost productivity. In most organizations, employees must remember between 5 and 30 passwords and are required to change many of them as frequently as every 30 days. The time wasted changing and resetting passwords may seem small and trivial, but it adds up over time and can be very frustrating. When employees are locked out because they have forgotten their user name or password, they cannot perform their jobs.

And lost employee productivity can translate into lost company revenue. Furthermore, poor password management by employees represents one of the biggest corporate security weaknesses today. Employees often write down their passwords in unsecured locations, share them with coworkers, or use common words like "password" as their password.

To help maximize convenience, enhance productivity and strengthen security, today's companies need a solution that enables them to easily deploy enterprise single sign-on. IBM Tivoli® Access Manager for Enterprise Single Sign-On, an Enterprise Single Sign-On solution powered by Passlogix technology, is an integral part of IBM's Security identity management portfolio. It provides a simple authentication capability across all your Microsoft® Windows®, Web, Java™, UNIX® Telnet, in-house developed, and host-based mainframe applications. The IBM Tivoli Access Manager for Enterprise Single Sign-On solution works in congruence with both IBM Tivoli Access Manager for e-business and IBM Tivoli Identity Manager, to provide a robust solution addressing the issue of password clutter throughout the enterprise.

IBM Tivoli Access Manager for Enterprise Single Sign-On is an Enterprise Single Sign-On solution powered by Passlogix technology which recognizes and responds to password requests from almost any system or application. The Tivoli Access Manager for Enterprise Single Sign-On solution supports different types of user authentication from password to smart cards to biometrics, and can store user credentials and its own system settings and policies in any LDAP directory or one of several databases. The administrative console simplifies administrative tasks by automatically recognizing and configuring applications for sign-on with minimal effort by the administrator. Users experience simple enterprise single sign-on while connected or disconnected to the corporate network, while roaming between computers, or while sharing a kiosk with multiple users. IBM Tivoli Access Manager for Enterprise Single Sign-On helps you:

• Automate sign-on and eliminate users' need to manage passwords
• Enhance security with automatic password management
• Extend audit and reporting capabilities to include user sign-on data
• Generate a quick payback and high return on investment (ROI) with a solution that is quick and simple to deploy and reduces help desk costs

Features, advantages and benefits

Features	Advantages	Benefits
Proven single sign-on	Users authenticate once for access to most applications	It detects and responds to all password-related events
Secure password management	Automates password generation and password policy support Uses the strongest cryptography currently available, including TripleDES and AES	Enhances security by eliminating poor end user password behavior.
Compliance Management	Extends audit and reporting capabilities to include user sign-on data	Eliminates the end-user costs associated with compliance driven initiatives. Helps organizations comply with stringent privacy and security regulations that govern their operations
Identity Management	Tightly integrates with Tivoli Identity Manager and Tivoli Access Manager for e-business	Integrated enterprise single sign-on is a key requirement of a complete identity management solution
Very easy deployment	Point and click wizards walk an administrator through the tasks of configuration, deployment and administration	No scripting, no programming, no integration
Quick payback and high ROI	Eliminates the users’ need to manage passwords	Reduces help desk costs by lowering the number of password reset calls and reducing time lost by users being locked out of systems. Improves productivity by eliminating end users’ need to remember and manage usernames and passwords

The IBM Tivoli Access Manager for Enterprise Single Sign-on platform consists of:

• IBM Tivoli Access Manager for Enterprise Single Sign-On
  provides companies with an enterprise single sign-on solution that simplifies the end user experience by eliminating the need to remember and manage usernames and passwords. Tivoli Access Manager for Enterprise Single Sign-On serves as the base for the other components.
• IBM Tivoli Access Manager for Enterprise Single Sign-On Desktop Password Reset Adapter
  eliminates the costs associated with the most frequently forgotten password - the Windows password.
• IBM Tivoli Access Manager for Enterprise Single Sign-On Provisioning Adapter extends the benefits generated by TAM E-SSO - - through the automation of the user credential distribution process. TAM E-SSO Provisioning Adapter, working with Tivoli Identity Manager, can pre-populate end users' TAM E-SSO credential stores so that users never have to touch, or even know, their user names and passwords.
• IBM Tivoli Access Manager for Enterprise Single Sign-On Authentication Adapter
  is a robust authentication management solution that allows flexible authentication using tokens, smart cards, biometrics and passwords. By acting as a mediating layer between authenticators and TAM E-SSO, TAM E-SSO Authentication Adapter enables any authenticator to work with any application.
• IBM Tivoli Access Manager for Enterprise Single Sign-On Kiosk Adapter
  addresses the threat of allowing individuals to share a workstation or kiosk by providing automated termination of inactive sessions and application shutdown.