PASSWORD SYNC FOR ACTIVE DIRECTORY, AZURE, SAP

Password Synchronization for multiple applications and systems

Create seamless synchronization to enable more security for your users

sync-image-slider-2

Start synchronizing your Active Directory passwords to your system

FastPass Sync for SAP

All SAP versions supported. The Password Sync SAP connector will work on all SAP types running on Kernel 4.6E and newer. Further UME/JAVA versions are also supported.

FastPass Sync for Oracle

FastPass Password Sync supports easy integration into multiple Oracle systems from a single implementation.

FastPass Sync for Oracle

FastPass Password Sync can support IBM i series, IBM i AS400, IBM Z

What is Password Synchronization?

Password synchronization is an automatic process of copying a new password to the user’s accounts on different systems. Users then have only one password to remember. Some of the benefits are convenience for your users and employees and reduced costs at the help desk.

How is password synchronization done technically:

For most practical situations passwords are synchronized from Windows to other systems like SAP, IBM, Oracle, SQL and others.

No system can understand the encrypted and hashed value of a password in Active Directory. This means that the synchronization model must read the password BEFORE it is encrypted by Windows.

This is done at an Interceptor at the domain controller, where the password exists in clear text. Then the interceptor can forward the password to Active Directory and to the target system in encrypted form. Now the user can use the same password even when AD and the target system has saved different encrypted values.

sync-icon-1
Easier for users

By synchronizing user passwords across different applications like Active Directory, other systems, and networks, FastPass Synchronization deals with password management as the user only needs to remember one password.

sync-icon-2
Increased Security

Users can focus on a much stronger new password because there is no need to remember more than one password credential.

sync-icon-3
Reduced Costs

Password synchronization enabled the same benefits as a single sign-on solution but has lower costs when it comes to implementation, purchase, installation, and operation.

Contact Us image

Contact FastPassCorp to discuss solutions to your situation

What is the business value of password synchronization:

For medium and large organizations password synchronization is a quick and most effective way of solving password management problems. The chance that the user is blocked from getting work done because of a forgotten password is related to the number of different passwords the user needs to remember. The more passwords the user needs to remember, the higher the chance of forgetting one. Requests about password resets and other password-related issues demand the most helpdesk resources. Fewer user passwords to remember = fewer help desk calls.

Technical prerequisites for password synchronization

Password policy must be identical for different passwords

 User-ids must be identical or be mapped

 Process in place for asynchronous handling if the target system is unavailable

Active Directory and domain controllers must be configured

What is the problem with password synchronization and Azure?

When your Windows passwords are controlled by Azure you don’t have the same domain controllers, and you can’t catch the password in clear text. Password synchronization is not possible now!

The process of Password synchronization works as follows:

You have two alternatives if you want to give users a good service and keep cost low at the help desk.

  1. ESSO

Enterprise Single Sign On solutions are a solution type used by many companies. Some will however find it expensive and inflexible.

  1. Self-service portal

As the users forget more passwords when they have multiple passwords you can give users self-service to reset and unlock all their passwords. You might have the Azure SSPR solution, but it will not help users with their other passwords.

A FastPass password reset portal for users, where they can securely verify their identity and then reset the password (or unlock the account) can be done at low cost, with a fast implementation.

With FastPass it can be an on-premises or a cloud solution.

SAP password self-serviceSAP password synchronization.

IBM passwords self-serviceIBM password synchronization 

Oracle passwords self-service | Oracle password synchronization

Reset Password with Password Policy
Active Directory Password Synchronization

Fewer password means fewer help desk calls 

For medium and large organizations password synchronization is a quick and most effective way of solving user password-related problems. The chance of a user's productivity is affected because a forgotten password is related to the number of different passwords the user needs to remember. The more application passwords needed to remember, the higher the chance to forget one. Requests about password resets and other password-related issues demand the most helpdesk resources.

 

Transparent Password Synchronization You Can Rely On

The password that was changed by a user on a native system must be tested for strength against the FastPass password policy. If it is acceptable, FastPass will synchronize passwords automatically locally and across other systems, which are used by the user.

The process of Password synchronization works as follows:

User: When the password is expired or whenever the user wants to change it, the user enters the login ID, current password, and new value.

Login server: receives a request and approves password quality internally; requests Password Manager interceptor library to further confirmation if it pass the password quality

Password Manager interceptor: affiliates the Password Manager server to establish an encrypted connection; despatch a request for password policy control.

Password manager: approves password quality.

Login server: changes the user’s password internally and notifies Password Manager interceptor of successful change.

Password Manager interceptor: affiliates the Password Manager server to establish an encrypted connection; despatch a request for password sync.

Password Manager: puts the new password for synchronization into a queue

Password Manager: resolves the single queued event to a table of passwords that need to be set for a particular user (one per login account).

Password Manager: sets the user’s passwords across all systems to the new value

Password Manager: in case of failure notifies the user about the problem

"The number of forgotten passwords per involved user per year has dropped from 1.6 to 0.3. This is an improvement of 83%!"

 

Protect your Passwords today with FastPass

Get in touch with us today by filling up the form and our team will get back to you as soon as possible.

Scroll to Top