1 Finn Jensen CEO Password for iSeries COMMON præsentation 5.feb 2014 2014.

Præsentationer af emnet: "1 Finn Jensen CEO Password for iSeries COMMON præsentation 5.feb 2014 2014."— Præsentationens transcript:

1 1 Finn Jensen CEO Password for iSeries COMMON præsentation 5.feb 2014 2014

2 Danske referencer

3 Password tanker med iSeries Single-Sign On SSO Simple Sign On: Synkronisering Bruger selvbetjening 3

4 Problemer med forskellige passwords? Brugere har problemer med at huske passwords AS400 applikationer matcher passwords mellem AD og AS400 og låser brugeren hvis de er forskellige. Bruger hjælp koster tid i service-desk. 4

5 Forskelle Synkronisering –Log-in til hvert system –Samme password – nemt at huske –Enkel installation –Robust ved SW-opgraderinger –Enkel at anvende ved Cloud applikationer –Billigt!! Single Sign-On (SSO) –Bruger logger kun på 1 gang! –Mere kompleks installation –Følsomt ved SW-opgraderinger –Reel investering 5

6 6 AD Interceptor FastPass Synch Engine ADAS400-1 AS400-2 NNYesNo MM1MMXXNo User tabel AS400 GWGW GWGW FastPass Standard Synchronization model Password change Identical passwords!! Conn iSeries SAP Google SQL Oracle UNIX General passw

7 AS400 technicalities 7 The Connector uses the IBM Tool Box for Java. The Java class AS400 is used to connect to the AS/400 host over SSL, the following command is run to set a password: CHGUSRPRF USRPRF(user) PASSWORD(password) STATUS(*ENABLED) PWDEXP(*NO) IFS If there are machines connected to the iSeries using IFS you need to have iSeries Password level 2. SSL The default setup is to use SSL connection between the iSeries and Password Manager machine. This setting can be changed by setting the SSLmode key to false in the file: \FastPassGateway\bin\ConnectorIBMSystemI\fpc101.properties

8 Hvad koster det?? 8 AS400 synkroniseringPriser DKK FastPass synkronisering op til 100 brugere20900 FastPass synkronisering op til 200 brugere24900 FastPass synkronisering op til 500 brugere35900 Årligt vedligehold (også første år)20% Optional konsulent assistance4900

9 Why Enduser Password Selfservice? 9 End-User Productivity Fast and easy PW-reset 24*7 service availability One password only - through synchronization Security and Compliance SOX; ISO 27002 Complex PW policies ’Your eyes only’ Improve HelpDesk Productivity Calls to IT Help Desk ( Aberdeen Group )

10 Selvbetjening

11 FastPass opens locked workstation 11

12 Password reset proces (AD og Multi-passwords) 12 FastPass Authenticate Challenge questions/ answers FastPass Reset password AD PW-policies User Repository Private mail HelpDesk &SMS PIN Code AS400 Synchronization Direct password reset Windows Change password Configuration examples: Only SMS Pin-code for low- sensitive system users On domain and Challenge question and SMS-PIN for HR users iSeries SAP Google SQL Oracle UNIX General passw

13 Password Manager : Based on Microsoft Architecture MS server 2003 / 2008/2012 AD User Repository ADAM/ADLDS Data Store PassWord Manager User on Intranet User on Extranet IISIIS in DMZ PassWord Manager Synchronization and Multisystem connectors SAPAS400Others

14 Best Practices Enrollment End-user acceptance HelpDesk processes Security Management 14

15 Total value of FastPass 15

16 Getting user acceptance and enrollment Soft but enduring!! –Invitation mails and reminders Forced enrollment but polite!! Combine for user acceptance and speed Avoid enrollment: Use SMS PIN-codes!!

17 Varde kommune 17

18 ‘Demonstration’

19 19

20 Hvad koster det?? 20 AS400 password selvbetjening inkl Active Directory og synkronisering Priser DKK FastPass op til 200 brugere29800 FastPass op til 350 brugere40975 FastPass op til 500 brugere52150 Årligt vedligehold (også første år)20% Optional konsulent assistance19900