Secure your password processes with OKTA and FastPass SSPR

User verification in the service desk has security risks – make it secure with FastPass and OKTA

User authentication in self-service of passwords (SSPR) with OKTA auth.

Okta FastPass Side Image
service desk productivity problem

The Situation

Your service desk receives calls all day long from users seeking assistance for users who need to reset he password or unlock their account. With work from home this has even increased more. It means a productivity cost for the service desk and the end-users.

users with okta verification

Users with OKTA Verification

If all or some of your users already have OKTA authentication then you can easily help users get better service and reduce the workload (and new hires) at the service desk. FastPass with OKTA password reset is a self-service solution for users.

The solution is intuitive, and the users will use their OKTA authentication for end-user verification in a familiar way for them, and it is available right at the login Window.

user no okta verification

Users without OKTA Verification

If you have users in special departments or regions without OKTA verify, then these users can verify with other methods in FastPass with single factor or Multi Factor Authentication as you need.

okta fastpass users

FastPass Users

For the few users who still call the service desk FastPass offers a secure process for user verification at the service desk: FastPass Identity Verification Manager (IVM).

The Solution

When a user fails at log in she is helped with a function button on the screen (even before Windows login) to initiate self-service. FastPass knows what verification process is required for the individual user (Different profiles for different user groups) and asks the user to complete the verification process. When this is done the user can reset the password according to the password policy.

With OKTA the user can choose among the factors the user is enrolled with, and depending on their group membership and location. The end-user can use the following OKTA factors in FastPass, Okta push, Okta verify TOTP, Okta SMS, Okta Callback, Okta Email, Okta Google TOTP or Okta Challenge/Response security questions. The factors themselves can be combined based on the user location and security group. E.g. when a user connects on the on-premise Lan, then OKTA SMS might be sufficient, but from Internet, the user might need other factors as well or only the Push feature. That can all easily be configured in FastPass. You might use many other tokens or methods for verification built into FastPass SSPR if the users don’t have OKTA.

OKTA FastPass solution
youtube-video-thumbnail

The result is:

  • A secure verification
  • Higher productivity for end-users
  • Reduced workload for the service desk
  • A complete logging for compliance review
  • Management can force new and better process instantly
  • Improve ROI for your OKTA investment
  • Prevent social engineering against the service desk and other support functions

Features

Different verification processes for different user groups, and different verifications depending on the network the user accesses from.

Oracle password system logos Active Dirctory IBM Google
OKTA FastPass Verification Methods

PC cache password reset for remote workstations (work from home)

Easy and forced enrollment of users

Available for on-premise and from FastPass Cloud

Can be integrated with Identity Verification Manager 

How does it work?

FastPass looks up the user in OKTA and presents the user for the available choices based on the response from OKTA and the FastPass configuration. This is done through the OKTA API.

Supported  OKTA credentials now are:

  • OKTA VERIFY-PUSH
  • TOTP
  • SMS
  • Call Back
  • Email
  • Google TOTP
  • Security Questions
OKTA-API-Illustration2

Benefits of OKTA Integration

FOR SSPR

Self-Service Password Reset

  • Secure user identification with OKTA approved credentials in self-service
  • Differentiate identification process based on credential types ( SMS versus Authenticator)
  • Use OKTA knowledge for behavioral data (roadmap)

FOR IVM PASSSWORD RESET

Identity Verification Manager

  • IVM uses OKTA credentials for secure identification
  • Differentiate identification process based on credential types ( SMS versus Authenticator)
  • Uses OKTA knowledge for behavioral data (roadmap)

Frequently Asked Questions

Can I try?

fastpass cloud for active directorypassword resetYou can test FastPass OKTA if you have OKTA installed. We will help you do the necessary configuration. The solution is available from the FastPass Cloud and on-premise too.

What's the price?

FastPass Okta SSPR Price

The cost of FastPass depends on the number of end-users and functionality. It is not an expensive security solution. A standard solution for a midsize account will be less than 40 cents/month/user.

For a normal POC there will not be any product costs. Contact us to get your individual quotation.

Will FastPass work with other stuff?

If you need to verify SAP users for password reset you can do this. You can connect to Oracle, IBM, LDAP, SQL and many other corporate systems.

If you want users to do password reset as self-service for SAP you can do this. You can connect to Oracle, IBM, LDAP, SQL and many other corporate passwords too.

Protect your Passwords today with FastPass

Get in touch with us today by filling up the form and our team will get back to you as soon as possible.

Get in Touch

Our team will get back to you as soon as possible.

Scroll to Top