Ach te hasła

Notatka z poczty:
"Today's focus: RSA releases integrated ESSO/two-factor authentication service By Dave Kearns
Even though we're constantly being told that passwords are so
last century, password management remains a critical issue for
corporate networks these days given that:
* The average user has to remember 12 or more passwords for
various systems/apps at work (according to an RSA survey).
* 35% of all help desk call volumes are password related
(according to the Gartner Group).
* The average cost per help desk call is $58 (according to the
Burton Group).
RSA provided these factoids as a justification (as if one were
really needed) for this week's release of RSA Sign-On Manager
4.5. While primarily an enterprise single sign-on service
(ESSO), Version 4.5 also expands Sign-On Manager's integration
with RSA SecurID, the widely deployed two-factor authentication
product. In fact, Sign-On Manager is the only service that joins
ESSO, self-service emergency access and strong authentication
across Microsoft Windows desktops and networks. It's also one of
the few integrated ESSO/two-factor authentication services
available from a single vendor.
Very few organizations have eliminated the use of passwords,
while regulatory compliance requirements are creating security
and password management challenges for organizations of all
sizes. Since passwords will be with us for some time longer, it
behooves us all to find ways to manage them quickly,
efficiently, securely and as inexpensively as possible. Sign-On
Manager, according to RSA, enables companies to implement best
practices for compliance, such as:
* Reducing the causes of unsafe behaviors (such as the password
list on a Post-It) that develop when users are forced to manage
a plethora of passwords.
* Strengthening an ESSO deployment with two-factor
authentication.
* Delivering automated emergency access capabilities for users
who forget their primary authentication method (e.g., passwords,
RSA SecurID token or smart card).
RSA's in-house developed IntelliAccess emergency access
technology provides self-service in the event of a lost or
misplaced RSA SecurID token, enabling users to access Windows
desktops, VPNs and wireless applications when disconnected from
the network, without calling the help desk. That's right, more
secure access by means of the SecurID one-time password token
coupled with help desk savings through the user's self-service
efforts when a problem occurs. That alone should make Sign-On
Manager worth investigating.
RSA Sign-On Manager 4.5 will be available to customers worldwide
in November. For more information on RSA Sign-On Manager click
here - it could save
you both time and money."