SecureAuth IEP
Versatile Authentication Service (VAS)

SecureAuth IEP: An Ultramodern Approach to Authentication Delivers Versatility

SecureAuth IEP's Versatile Authentication Service (VAS), native to the SecureAuth platform, solves the problem of having to purchase and deploy multiple products to meet authentication requirements for your cloud and web applications — requirements that are based on the role of your user, resources accessed, and regulations.

SecureAuth’s VAS automates the creation and management of user credentials, reducing administrative overhead and strengthening security by ensuring that only authorized users are accessing your cloud and web applications. SecureAuth IEP's VAS includes single, 2, and 3 factor methods including X.509 Certificates, SMS OTP, Telephony OTP, Email OTP, KBA/KBQ, Static Pins, and Passwords — even CAC Cards. Understanding that an identity workflow doesn’t begin or end with authentication, SecureAuth IEP also includes support for both SSO and IdM services under the same umbrella to address the complete identity workflow.

Benefits of SecureAuth IEP’s Versatile Authentication Service

• Deploy Versatile Authentication Based on Roles, Resources, and Regulations
• Eliminate Threats Associated with Phishing Attacks
• Cost-effective to Deploy and Manage Authentication for Millions of Users
• Straightforward, Fast Application Integration Equals ROI in Days, not Months
• Simple, Secure User Self-enrollment Increases Productivity

Deploy Versatile Authentication Based on Roles, Resources, and Regulations

SecureAuth's VAS is native to SecureAuth IEP and enables you to easily implement single, 2, or 3-factor authentication that maps directly to the roles of your users, the resources they are accessing, and the regulations governing the application data. Authentication options that can be easily configured include X.509 Certificates, SMS OTP, Telephony OTP, Email OTP, KBA/KBQ, Static PINs, and Passwords. In addition, SecureAuth IEP leverages the same extensible architecture to support other multifactor products including CAC Cards and YubiKey. With SecureAuth's VAS you can balance the needs of your users, the sensitivity of the applications you are protecting, and overall ease of use.

Back to top of the page

Eliminate Threats Associated with Phishing Attacks

X.509 v3 digital certificates are one of the strongest authentication options available today to protect against phishing attacks because of their ability to validate both the user and the server being accessed. SecureAuth utilizes a revolutionary new approach to X.509 v3 technology that delivers the promise of mutual authentication without the complexities and cost of an old-school PKI infrastructure. No longer constrained by cost or complexity, X.509 v3 certificates can be implemented for any user that accesses your cloud or web-based applications from their desktop, smartphone or tablet. SecureAuth IEP conducts 2-Factor authentication utilizing industry endorsed, browser-based X.509. v3 certificates. Acting as the authentication enforcement point, SecureAuth IEP checks the validity of the certificate based on information stored in the directory so there isn't a need to rely on hard to manage certificate revocation lists (CRLs).

Back to top of the page

Cost-effective to Deploy and Manage Authentication for Millions of Users

SecureAuth IEP scales to meet the challenge of supporting authentication for thousands of B2B users, even millions of B2C users. Delivered as a virtual or hardware appliance, SecureAuth IEP includes everything needed to secure and simplify access to your cloud and web applications. Because we have included a hardened OS, embedded web server, pre-built web pages, data connectors, packaged encrypted modules, and web service client connectors, you don't have to worry about additional investments in infrastructure, staffing, or training. SecureAuth’s centrally managed policies make it easy to control access to all cloud and web applications by specifying the type of authentication and how often it is required. And SecureAuth's Security Token Service (STS) automates the identity workflow and ensures interoperability between different authentication methods by consuming identities from any source, working with the VAS service to authenticate the user, and asserting the appropriate identity to web and SaaS applications as needed.

Back to top of the page

Straightforward, Fast Application Integration Equals ROI in Days, not Months

SecureAuth IEP can be up and running in days, not weeks or months. Why? It’s simple. SecureAuth has eliminated APIs and the need to write custom code by building a system that includes Versatile Authentication and SSO that can be easily configured to work with your existing infrastructure, cloud and web applications. All of the intricacies of directory integration, SAML, and certificate authorities have been addressed by our development team so your staff doesn't require additional training or experience. And there is more. SecureAuth IEP's works with industry leading mobile devices(iOS, Android, etc.) and VPNs from Cisco, F5, Juniper Citrix, and Microsoft. This enables comprehensive, seamless authentication across all applications accessed from the Internet, whether cloud-based, or protected by a VPN.

Back to top of the page

Simple, Secure User Self-service Enrollment Increases Productivity

One of the most time consuming and complicated processes for any system is getting users provisioned. SecureAuth’s end user self-enrollment process is simple, self-explanatory and doesn’t require help desk or administrative support. An administrator simply selects the authentication method to be used before a user is allowed to continue with the sign-on process. Once authenticated, a user can update their profile and reset their own passwords.

Back to top of the page