Authentication Solutions - By Industry

Banking/Finance

Challenge

Organizations in the banking and financial services industry vary in terms of size and geographical scope, and the security and password-related issues they are trying to address can vary as well.  However, the customers in this industry do have some common goals, which are simplifying access to enterprise applications, enabling corporate-wide access, and, most of all, optimizing password security to protect sensitive financial and confidential data from access by unauthorized intruders.

Solution

PistolStar’s Password Power and PortalGuard provide single sign-on using Active Directory with Kerberos, allowing end-users to use one password one time to access numerous enterprise applications, directories and servers, such as Lotus Domino and Notes, IBM WebSphere and System i, SAP and Oracle.  By integrating the Kerberos authentication protocol, PistolStar adds a layer of security because the end-user and the server to which they want to gain access are mutually authenticated.  Kerberos also does not send any passwords over the network.

Password Power and PortalGuard also enable access via a Web browser, giving roaming end-users easy access to the applications they need and further simplifying access for all.  End-users benefit from having fast and convenient logons, which free up time, allow them to be more efficient and, ultimately, boost productivity.

PortalGuard also provides functionality that enables administrators to meet or exceed their security objectives.  Administrators can implement best practices for ensuring stronger and consistently secure authentication such as requiring a username, password and challenge question response to gain access and multiple challenge questions for self-service password reset and recovery.  Password rules can be established by person, group or hierarchy and enable/disable certain password behaviors.  For example, administrators can configure the number of password strike-outs allowed for each user and receive an alert when a strike count is exceeded.  They also have the ability to:

• Prevent multiple users from logging in with the same credentials;
• Set password expiration intervals;
• Select a grace period for expired passwords;
• Lock out inactive users;
• Restricts the frequency with which a previously-used password can be re-used; and
• Validate password strength during login.

Administrators can also control password quality by configuring 12 fully customizable password strength rules.