Identity Management Integrations
ID-Synch® has an open architecture and can be integrated with the full spectrum of existing IT infrastructure: (1) (2) (3)
- Broad Platform Support
ID-Synch has built-in support for 70+ platforms, including operating systems, directories, collaboration and ERP applications, databases and more. It can also be readily integrated with custom and vertical market applications, with little or no custom programming.
Built-in support for every relevant platform expedites deployment, as roll-out is not held up waiting for product enhancements or custom software development.
- E-Mail Integration
Over 163 events can trigger e-mails to users, administrators, the help desk and more. This includes requests to register, requests for change authorization and "thank you" notes. The same events can also trigger automatic creation or tickets in a problem management system.
E-mail integration supports user education, prompting for action and updates on workflow status.
- Help desk / issue management integration
The same events that can cause ID-Synch to send an e-mail to a user or a security officer can also trigger automatic creation, update or closure of a ticket in any of more than 15 help desk applications.
- Enterprise Single Sign-On Systems
ID-Synch can pre-populate a user's credentials to a newly provisioned account in the user's SSO profile.
Where both P-Synch® and a traditional E-SSO product are installed in the same environment, they can and should be integrated, so that passwords cached in the E-SSO software remain valid, even after P-Synch changes them on target systems.
P-Synch can re-encrypt a user's E-SSO profile in the credential database after a successful password change or reset. This ensures that SSO credentials do not become invalid whenever a user forgets his password. SSO-integrated password reset eliminates the need for manual key recovery and for user re-enrollment when passwords are forgotten.
Integrations with E-SSO are currently available with P-Synch for Citrix MetaFrame Password Manager, Passlogix v-Go and for the SAP Portal. Hitachi ID will build additional integrations in response to customer requests.
P-Synch can also be used to expedite deployment of an E-SSO system, as it quickly, efficiently and reliably collects and correlates user login IDs across systems. As users change their passwords, their new passwords can be automatically pre-populated into the E-SSO credential database, eliminating the need for (costly, time consuming) E-SSO user enrollment.
Integration between ID-Synch and an E-SSO product is illustrated in Figure [link].
Integrating with Enterprise Single Signon (4)
- Meta directory integration
ID-Synch can leverage user profile data already found in a meta directory, especially to look up user attributes and login ID reconciliation.
ID-Synch comes with a wide range of platform integrations -- many more than meta directory products include. ID-Synch's fulfillment service (SOAP web service) can be used to extend the reach of a meta directory to a broader range of target systems.
- Authentication tokens, smart cards, PKI
ID-Synch can authenticate users (requester, authorizers, security administrators) using hardware tokens, smart cards or software PKI certificates. ID-Synch can also provision user objects and provision physical devices on these platforms.