PASSWORD SYNC FOR ACTIVE DIRECTORY, AZURE, SAP
Password Synchronization for multiple applications and systems
Create seamless synchronization to enable more security for your users
All SAP versions supported. The Password Sync SAP connector will work on all SAP types running on Kernel 4.6E and newer. Further UME/JAVA versions are also supported.
FastPass Password Sync supports easy integration into multiple Oracle systems from a single implementation.
What is Password Synchronization?
Password synchronization is an automatic process of copying a new password to the user’s accounts on different systems. Users then have only one password to remember. Some of the benefits are convenience for your users and employees and reduced costs at the help desk.
How is password synchronization done technically:
For most practical situations passwords are synchronized from Windows to other systems like SAP, IBM, Oracle, SQL and others.
No system can understand the encrypted and hashed value of a password in Active Directory. This means that the synchronization model must read the password BEFORE it is encrypted by Windows.
This is done at an Interceptor at the domain controller, where the password exists in clear text. Then the interceptor can forward the password to Active Directory and to the target system in encrypted form. Now the user can use the same password even when AD and the target system has saved different encrypted values.
How FastPass Sync works
Easier for users
By synchronizing user passwords across different applications like Active Directory, other systems, and networks, FastPass Synchronization deals with password management as the user only needs to remember one password.
Increased Security
Users can focus on a much stronger new password because there is no need to remember more than one password credential.
Reduced Costs
Password synchronization enabled the same benefits as a single sign-on solution but has lower costs when it comes to implementation, purchase, installation, and operation.
Contact FastPassCorp to discuss solutions to your situation
What is the business value of password synchronization:
For medium and large organizations password synchronization is a quick and most effective way of solving password management problems. The chance that the user is blocked from getting work done because of a forgotten password is related to the number of different passwords the user needs to remember. The more passwords the user needs to remember, the higher the chance of forgetting one. Requests about password resets and other password-related issues demand the most helpdesk resources. Fewer user passwords to remember = fewer help desk calls.
Technical prerequisites for password synchronization
Password policy must be identical for different passwords
User-ids must be identical or be mapped
Process in place for asynchronous handling if the target system is unavailable
Active Directory and domain controllers must be configured
What is the problem with password synchronization and Azure?
When your Windows passwords are controlled by Azure you don’t have the same domain controllers, and you can’t catch the password in clear text. Password synchronization is not possible now!
The process of Password synchronization works as follows:
You have two alternatives if you want to give users a good service and keep cost low at the help desk.
- ESSO
Enterprise Single Sign On solutions are a solution type used by many companies. Some will however find it expensive and inflexible.
- Self-service portal
As the users forget more passwords when they have multiple passwords you can give users self-service to reset and unlock all their passwords. You might have the Azure SSPR solution, but it will not help users with their other passwords.
A FastPass password reset portal for users, where they can securely verify their identity and then reset the password (or unlock the account) can be done at low cost, with a fast implementation.
With FastPass it can be an on-premises or a cloud solution.
SAP password self-service | SAP password synchronization.
IBM passwords self-service | IBM password synchronization
Oracle passwords self-service | Oracle password synchronization
Fewer password means fewer help desk calls
For medium and large organizations password synchronization is a quick and most effective way of solving user password-related problems. The chance of a user's productivity is affected because a forgotten password is related to the number of different passwords the user needs to remember. The more application passwords needed to remember, the higher the chance to forget one. Requests about password resets and other password-related issues demand the most helpdesk resources.
Transparent Password Synchronization You Can Rely On
The password that was changed by a user on a native system must be tested for strength against the FastPass password policy. If it is acceptable, FastPass will synchronize passwords automatically locally and across other systems, which are used by the user.
The process of Password synchronization works as follows:
User: When the password is expired or whenever the user wants to change it, the user enters the login ID, current password, and new value.
Login server: receives a request and approves password quality internally; requests Password Manager interceptor library to further confirmation if it pass the password quality
Password Manager interceptor: affiliates the Password Manager server to establish an encrypted connection; despatch a request for password policy control.
Password manager: approves password quality.
Login server: changes the user’s password internally and notifies Password Manager interceptor of successful change.
Password Manager interceptor: affiliates the Password Manager server to establish an encrypted connection; despatch a request for password sync.
Password Manager: puts the new password for synchronization into a queue
Password Manager: resolves the single queued event to a table of passwords that need to be set for a particular user (one per login account).
Password Manager: sets the user’s passwords across all systems to the new value
Password Manager: in case of failure notifies the user about the problem
"The number of forgotten passwords per involved user per year has dropped from 1.6 to 0.3. This is an improvement of 83%!"
Protect your Passwords today with FastPass
Get in touch with us today by filling up the form and our team will get back to you as soon as possible.