How does actividentity work

Vendors need to recognise this and move to develop clients that are universal. The Web Help desk does work in any browser but the thick client does not. The dependency on Microsoft SQL server is similar, and although integration with other systems is possible, tech support becomes a problem see above. ActvID have chosen to use a database backend to achieve synchronisation between servers. Which means that you have to install a full MSSQL or use an existing unit to allow for data replication.

I find this ridiculous. As a network engineer, I do not want to be installing SQL or integrating with a database administrator to maintain such an important system. In effect, this concept designs failure INTO the system. The product does work, and, once you adapt yourself around the way it works, it works fine. The Web Helpdesk is a nice idea, but obviously something that you are expected develop a user interface for as part of your helpdesk software.

For smaller IT operations no one is going to take time to customise it. Evidian, the market leader for Enterprise SSO , offers the solution to benefit from a secure, easy to implement enterprise single sign-on, used by millions of users and thousands of companies. Evidian offers solutions for safe Self-Service Password Reset and multifactor authentication methods.

It is available on Windows, Android and iOS and it supports virtualized desktop infrastructures and terminal server emulators. This program is intended to ActivIdentity SSO users who want to continue benefiting from secure Single Sign-On and extending possibilities for platform support, security features, mobility usage, Cloud and as-a-service access.

Indeed, Evidian is able to automate the migration steps. Evidian ensures business continuity at all times for your end-users authentication and Single Sign-On needs. Today over 5 Million users around the globe enjoy a Single Sign On experience. It is their satisfaction and feedback combined with our skill and support that makes Evidian a strong and reliable vendor in the authentication and security marketplace.

By using Evidian Enterprise SSO you free your users from memorizing and typing passwords, you limit password proliferation and you enhance the password authentication security.

This is a shared secret - the dongle does not connect to a remote server. The server will probably allow one or two of the most recent secret keys, to prevent the situation where you enter a key that has just expired while the transmission was en route. Although my recent experience with Amazon Web Service multi-factor authentication has definitely resulted in login failures within 5 seconds of a code being displayed to me.

In other words, some vendors are very strict with their timing windows. As always, it's a trade-off between security and usability. I chose this article because it has a reasonable, physical description; the higher-level articles focus on the theoretical over the physical implementation.

The article also confirms that you need to keep the secrecy of the token, or someone else can impersonate your logins by knowing what the codes are as easily as you do. The token hardware is designed to be tamper-resistant to deter reverse engineering. When software implementations of the same algorithm "software tokens" appeared on the market, public code has been developed by the security community allowing a user to emulate RSA SecurID in software, but only if they have access to a current RSA SecurID code, and the original bit RSA SecurID seed file introduced to the server.

However, since the verifying server has to have foreknowledge of the tokens , the two-factor secrets are vulnerable to attacks on the source as well. SecurID was the victim of a high-profile theft that targeted their own servers and eventually led to secondary incursions on their clients' servers as well. Finally, there is more information available on the security. But how do bank server know my unique generated number? Probably the bank is counting the elapsed time after you activate it; because you have to activate these security devices at the first use with a generated unique number from your own device.

So, in an exact timing calculation bank server knows the input number have to be xxx-xxx and will change while time elapses. I am sure that the device battery gives power to quartz crystal within battery life cycle even if you never use the security device. If the battery is removed it fails generating number due to the quartz crystal not being powered and time cannot be counted at that moment.

So it can never generate same unique numbers again. How are we doing? Please help us improve Stack Overflow. Take our short survey. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams?

Collectives on Stack Overflow. BT has road-tested the ActivIdentity authentication solution to facilitate remote access to its own network.

Over the past three years, BT has issued ActivIdentity tokens to over 70, employees as part of its own "BT Workstyle" flexible working policy. The technology allows them to securely access the company network wherever they are located, bringing multiple benefits.

The adoption of a wide-scale flexible working policy by BT has shown a marked increase in staff motivation and retention of key staff as a result of an improved work-life balance. Employers want to be able to offer their employees an adaptable working policy and take advantage of cost efficiencies, without jeopardising security. Comments: 0.