FREE TRIAL
#SecurityNews: “Seven ways identity, access management will change in the enterprise”

#SecurityNews: “Seven ways identity, access management will change in the enterprise”

by | Nov 8, 2013 | Uncategorized

Enterprises should plan on identity management evolving to be less expensive, more scalable, faster to deploy, more intelligent, tuned for industry and have a better interface for end-users.

Those messages Monday were the opening salvos to a crowd of 900 attendees at Gartner’s annual identity and access management conference.

It was a welcomed outlook given that identity is becoming an important security construct in a world where cloud services, mobile devices and social networks are exploding traditional enterprise boundaries.

«In the past, efficiency was a key driver [for identity management roll-outs],» said Gregg Kreizman, research vice president at Gartner. «Compliance came along, but business enablement is the Holy Grail.»

Complete article by ZDNet

#SecurityNews: “Seven ways identity, access management will change in the enterprise”

#SecurityNews: “Insider with privileged accounts often access sensitive info they don’t need”

by | Nov 1, 2013 | News

#SecurityNews: “Insider with privileged accounts often access sensitive info they don’t need”

Every company has a group of trusted insiders with privileged access to corporate IT networks. But for IT executives, there continue to be challenges associated with proper identity and privilege management, and insider threats continue to be a serious threat vector for organizations.

Results from BeyondTrust’s “Privilege Gone Wild” report show that privileged users are “out of control.” On a regular basis, employees are granted excessive privileges and access for their particular roles, resulting in unnecessary risks to organizations. Overall, 44% of employees in the survey said that they have access rights that are not necessary to their job.

One of the most startling statistics from this survey reveals that 28% of respondents admitted to having retrieved information not relevant to their job. When asked what information was accessed, nearly one-quarter identified financial reports and almost half provided written responses specifying salary details, HR data and personnel documents

Complete article by InfoSecurity

Barceló Hotels & Soffid IAM

Barceló Hotels & Soffid IAM

by | Sep 10, 2013 | Customer, soffid

Barceló Hotels is deploying Soffid IAM & Soffid ESSO to enable single sign on access to its corporate applications, using either smartphones, tablets or desktop PCs.

With Soffid ESSO, Barceló boosts their employees productivity and, at the same time, reduces the effort needed to support them, reducing the global operational costs.

#SecurityNews: “Seven ways identity, access management will change in the enterprise”

New Version 1.3

by | May 28, 2013 | News

We have been working very hard the last few months to have available by the end of the year a number of significant improvements for the efficiency of our tool. Surely you notice the difference. Recertification process, rules and authoritative identity sources, XAMCL Addon, Replica Addon, Lopd Addon…

What’s new on this release:

  • Recertification process: This addon makes possible for organitzations to easily review and validate all users permissions.
  • Rules and Authoritative Identity sources: Soffid will catch the information from an authoritative managed system.
  • XACML Addon: New plugin with eXtensible Access Control Markup Language (XACML) Version 2.0 implementation Standard.
  • Replica Addon: New plugin to replicate Soffid database in homogeneous environments.
  • Lopd Addon: New plugin to manage information about files with personal data.
  • Improved reconcile process performance.
  • ESSO certified to be used on windows 8.1
  • Minor Features:

· Extended maximun user code to 150 chars.
· SelfService allows notifies the accounts affected by a password change, accounts near to expired and expired ones.
· Error messages have been improved.
· Modifications in user types in the agent configuration spread the changes.
· Syncserver unistallation tool has been improved.
· Search criteria has been added to authorizations page.
· Windows firewall is automatically configured on ESSO install.
· Better handling anormal conditions on SAML Identity Federation.
· Improved search criteria.
· New process added automatically to views.