Secure your password processes with OKTA and FastPass SSPR
User verification in the service desk has security risks – make it secure with FastPass and OKTA
User authentication in self-service of passwords (SSPR) with OKTA auth.
The Situation
Your service desk receives calls all day long from users seeking assistance for users who need to reset he password or unlock their account. With work from home this has even increased more. It means a productivity cost for the service desk and the end-users.
Users with OKTA Verification
If all or some of your users already have OKTA authentication then you can easily help users get better service and reduce the workload (and new hires) at the service desk. FastPass with OKTA password reset is a self-service solution for users.
The solution is intuitive, and the users will use their OKTA authentication for end-user verification in a familiar way for them, and it is available right at the login Window.
Users without OKTA Verification
If you have users in special departments or regions without OKTA verify, then these users can verify with other methods in FastPass with single factor or Multi Factor Authentication as you need.
FastPass Users
For the few users who still call the service desk FastPass offers a secure process for user verification at the service desk: FastPass Identity Verification Manager (IVM).
The Solution
When a user fails at log in she is helped with a function button on the screen (even before Windows login) to initiate self-service. FastPass knows what verification process is required for the individual user (Different profiles for different user groups) and asks the user to complete the verification process. When this is done the user can reset the password according to the password policy.
With OKTA the user can choose among the factors the user is enrolled with, and depending on their group membership and location. The end-user can use the following OKTA factors in FastPass, Okta push, Okta verify TOTP, Okta SMS, Okta Callback, Okta Email, Okta Google TOTP or Okta Challenge/Response security questions. The factors themselves can be combined based on the user location and security group. E.g. when a user connects on the on-premise Lan, then OKTA SMS might be sufficient, but from Internet, the user might need other factors as well or only the Push feature. That can all easily be configured in FastPass. You might use many other tokens or methods for verification built into FastPass SSPR if the users don’t have OKTA.
The result is:
Features
Different verification processes for different user groups, and different verifications depending on the network the user accesses from.
PC cache password reset for remote workstations (work from home)
Easy and forced enrollment of users
Available for on-premise and from FastPass Cloud
Can be integrated with Identity Verification Manager
How does it work?
FastPass looks up the user in OKTA and presents the user for the available choices based on the response from OKTA and the FastPass configuration. This is done through the OKTA API.
Supported OKTA credentials now are:
Benefits of OKTA Integration
FOR SSPR
Self-Service Password Reset
FOR IVM PASSSWORD RESET
Identity Verification Manager
Frequently Asked Questions
You can test FastPass OKTA if you have OKTA installed. We will help you do the necessary configuration. The solution is available from the FastPass Cloud and on-premise too.
The cost of FastPass depends on the number of end-users and functionality. It is not an expensive security solution. A standard solution for a midsize account will be less than 40 cents/month/user.
For a normal POC there will not be any product costs. Contact us to get your individual quotation.
If you need to verify SAP users for password reset you can do this. You can connect to Oracle, IBM, LDAP, SQL and many other corporate systems.
If you want users to do password reset as self-service for SAP you can do this. You can connect to Oracle, IBM, LDAP, SQL and many other corporate passwords too.
Protect your Passwords today with FastPass
Get in touch with us today by filling up the form and our team will get back to you as soon as possible.
Get in Touch
Our team will get back to you as soon as possible.