PASSWORD SYNCHRONIZATION
HELP USERS WITH JUST ONE PASSWORD ACROSS ALL APPLICATIONS
- FAST IMPLEMENTATION
- USERS ARE NOT INVOLVED
- CHEAP COMPARED TO SSO
- ROBUST FOR SOFTWARE CHANGES
What is password synchronization?
Password sync is an automatic process copying a new password to the user’s accounts on different systems. Users have then only one password to remember.
Easier for users
By synchronizing users’ passwords across different devices, applications, websites, and networks, password synchronization deals with password chaos as the user only needs to remember one password.
Increases security
Users accept strong passwords that can’t be easily guessed when they only have one password to remember.
Reduces costs
Password synchronization gives nearly the same benefits as a single sign-on solution but lowers costs for implementation and purchase.
For medium and large organizations password synchronization is a quick and most effective way of solving password management problems. The chance that the user is blocked from getting work done because of a forgotten password is related to the number of different passwords user needs to remember. The more passwords the user needs to remember, the higher the chance to forget one. Requests about password resets and other password-related issues demand the most helpdesk resources. Fewer passwords to remember = fewer help desk calls.
When users only have one password to remember you will see a sharp decline in the number of forgotten passwords as well compared to the situation with many different passwords with different password policies.
You may, however, have these challenges:
- Password policy must be identical for different passwords
- User-ids must be identical or be mapped
- Process in place for asynchronous handling if the target system is unavailable
Solutions for password synchronization are in general cheaper than Single Sign-On (SSO) solutions and are more robust to changes in the software configuration of the target systems.
You have low complexity in a password synchronization project as you don’t need to change any user process. Just inform them that they now have the same password for all systems – they just have to change the password when Windows ask them to!
How does Password Synchronization from Active Directory work?
Easy Password Sync from Active Directory with FastPass
- When users need to change their password they just press “ctrl alt delete” and press “change password”
- Your domain controller will encrypt your password record to the active directory. Fast Pass will now intercept the new password when entered and sends it to the Fast Pass synchronization engine encrypted
- FastPass then makes a new password record for your other systems like SAP and IBM
- Through its gateway to FastPass then sets a new encrypted transaction with the user’s user ID for the external system to change the password there
That’s it! Same password on all systems in 10 seconds!
FastPass supports Active Directory and Azure AD users.
FastPass password sync is based on an AD interceptor catching all changes to passwords in AD. This creates a transaction to FastPass password synchronization module. FastPass then has a user-map where the user’s user-ids are linked together for the synchronization transaction. FastPass password synchronization reacts very fast, so in general users’ passwords are changed in the target systems even before the user logs in to the alternate systems.
See more on Password Synchronization
Do you want to synchronize passwords from Windows /Active Directory (AD) /Azure AD to your SAP/Oracle/IBM systems?
FastPass is a software solution where you can configure the sync from AD to SAP/Oracle/IBM. With FastPass you can easily extend password sync with self-service of passwords for your Windows environment when AD password is forgotten or is locked. Pricing for purchase/rental/ Cloud is flexible and depends on your specific configuration.
FastPass helps you achieve financial, productivity and compliance requirements.
FastPass for SAP
SAP password reset tool for Self Service or Synchronize:
- Easy to use self-service portal for all instances
- Supports all SAP variations, and an unlimited number of SAP instances
- Functionality as FastPass Enterprise
- Synchronize AD passwords to SAP passwords
FastPass for Oracle
Oracle reset password portal and synch for end-users:
- Easy to use self-service portal for all systems
- Supports all Oracle variations, and an unlimited number of Oracle systems
- Functionality as FastPass Enterprise
- Synchronize AD passwords to SAP passwords
FastPass for IBM
Password synchronization or password reset for IBM i series, IBM Z and RACF:
- Easy to use self-service portal for all systems
- Supports all Oracle variations, and an unlimited number of Oracle systems
- Functionality as FastPass Enterprise
- Synchronize AD passwords to SAP passwords
Transparent Password Synchronization
The password that was changed by a user on a native system must be tested for strength against the FastPass password policy. If it is acceptable, FastPass will synchronize passwords automatically locally and across other systems, which are used by the user.
The process of Password synchronization works as follows:
- User: When the password is expired or whenever the user wants to change it, the user enters the login ID, current password and new value.
- Login server: receives a request and approves password quality internally; requests Password Manager interceptor library to further confirmation of password quality
- Password Manager interceptor: affiliates the Password Manager server to establish an encrypted connection; despatch a request for password policy control.
- Password manager: approves password quality.
- Login server: changes the user’s password internally and notifies Password Manager interceptor of successful change.
- Password Manager interceptor: affiliates the Password Manager server to establish an encrypted connection; despatch a request for password sync.
- Password Manager: puts the new password for synchronization into a queue
- Password Manager: resolves the single queued event to a table of passwords that need to be set for a particular user (one per login account).
- Password Manager: sets the user’s passwords across all systems to the new value
- Password Manager: in case of failure notifies the user about the problem