eTrust Admin Simplifies Management of All Identities and Resources

Driven by new Internet technologies, business growth requires organizations to extend their systems, applications and directories to partners, suppliers, customers and employees. This explosion in user population makes the task of managing user accounts increasingly complex. It also creates a new need for identity management—the ability to control and monitor individual user access over time. Compounding this situation are the business realities of mergers, acquisitions and divestitures — the numbers of users are increasing and the numbers of system types are expanding. IT directors are forced to manage multiple operating systems, mail systems, network operating systems and home-grown applications distributed across various, often worldwide locations. Individually managing multiple directories is time-consuming, costly and error-prone — especially in organizations where changes frequently occur. Keeping up with the daily maintenance can be a significant task. Ensuring overall security and integrity across the board increases the challenge.

eTrust Admin is a proven solution for enterprise-wide user administration. It provides end-to-end user account management across multiple, geographically dispersed security systems and directories through a single graphical user interface (GUI). This powerful tool enables the creation, modification and removal of users across multiple environments, and employs role-based administration to help ensure consistent security across an entire enterprise. eTrust Admin scales to handle large, global deployments of users, and simplifies global modifications to user accounts based on organizational or personnel changes. In addition, it offers unique benefits to help organizations:

• Reduce administrative costs by automating most of the tasks required to create and manage user accounts — freeing administrators for core business activities. Simple, web-based interfaces and delegated administration enable day-to-day tasks to be performed by less technical individuals.

• Increase security by providing role-based user administration. This helps ensure that users always have the proper access to resources in accordance with policies, and that all relevant accounts are removed or disabled when an employee leaves an organization. All administrative actions are audited in accordance with regulations.

• Improve end user satisfaction through accelerated account creation upon user enrollment.

Distinctive Functionalities

Intuitive User Interfaces. Administrators can choose a GUI or web-based interface to define roles and policies, as well as enroll users. Both presentations conceal the differences and complexities of the underlying operating systems, making them extremely easy to use.

Delegated Administration. Administrative permissions can be scoped to allow each administrator to focus on a key area, such as resetting passwords.

Directory Integration. Using the standard X.500 technology of eTrust Directory, eTrust Admin can scale to millions of users. It achieves superior performance, regardless of the number of supported users and widely distributed installations.

LDAP v3 Support. eTrust Admin uses the Lightweight Directory Access Protocol v3 to extend its user administration capabilities to LDAP-compliant directories.

Intuitive Workflow. eTrust Admin features an intuitive workflow management tool that automatically initiates, approves, tracks and fulfills user requests.

Self-Service Password Reset. eTrust Admin supports a challenge/ response web interface that allows users who have forgotten their passwords to re-establish them  — reducing the load on the help desk staff.

Self-Registration. Users can request enrollment in eTrust Admin via a web-based form available through the Self-Administration interface, Delegated Administration interface or Workflow interface.

Password Synchronization. eTrust Admin simplifies password management by synchronizing users’ passwords on various systems.

Auditing and Reporting. eTrust Admin logs changes to a central point, and administrators can use predefined reports to review the security settings of administered users.

Software Development Kit. The Software Development Kit allows any system or application to exploit the common security access policy of eTrust Admin, reducing administrative costs, and consolidating reports and audits.