Configuring Strong Authentication With Ibm Tivoli Access Manager For Enterprise Single Sign On

IBM® Tivoli® Access Manager for Enterprise Single Sign-On automates sign-on and access to enterprise applications, eliminating the need to remember and manage user names and passwords. Users log on to Tivoli Access Manager for Enterprise Single Sign-On with a special user ID and password, and then, when they access their secured applications, the Tivoli Access Manager for Enterprise Single Sign-On agent enters their stored credentials automatically without the users needing to do so. Tivoli Access Manager for Enterprise Single Sign-On provides the usual features associated with password security, for example, password length, aging policy, and so forth. This IBM RedpapersTM publication is based on a set of exercises that was produced for the European Tivoli Technical Conference 2010. It shows how to configure Tivoli Access Manager for Enterprise Single Sign-On to use additional or alternative methods of authentication when users log on to provide a greater degree of security (stronger authentication). This paper is intended to complement the product documentation and should be read in conjunction with it. In particular, you should refer to the Setup Guide.

Everyone feels the pain of too many passwords to remember. Everyone can relate to the security exposure of weak passwords, chosen for convenience. And, everyone can relate to passwords placed in proximity to the workstation for a quick reminder. Unfortunately, that note can allow more than the intended user into the system and network. The average user today often has four or more passwords. And, security policies that focus on password complexity and password-change frequency can cause even more difficulty for users. This IBM® Redbooks® publication introduces IBM Security Access Manager for Enterprise Single Sign-On 8.2, which provides single sign-on to many applications, without a lengthy and complex implementation effort. Whether you are deploying strong authentication, implementing an enterprise-wide identity management initiative, or simply focusing on the sign-on challenges of a specific group of users, this solution can deliver the efficiencies and security that come with a well-crafted and comprehensive single sign-on solution. This book is a valuable resource for security officers, administrators, and architects who want to understand and implement an identity management solution in a medium-scale environment. This book is an update to the existing SG24-7350-01. IMPORTANT: Please note that in the latest version of SAM ESSO, the following two capabilities described in this SAM ESSO Redbooks publication have been removed: -Virtual appliance support -Mobile (iPad) support

This IBM Redbooks publication reviews the overall Tivoli Enterprise Security Architecture. It focuses on the integration of audit and compliance, access control, identity management, and federation throughout extensive e-business enterprise implementations. The available security product diversity in the marketplace challenges everyone in charge of designing single secure solutions or an overall enterprise security architecture. With Access Manager, Identity Manager, Federated Identity Manager, Security Compliance Manager, Security Operations Manager, Directory Server, and Directory Integrator, Tivoli offers a complete set of products designed to address these challenges. This book describes the major logical and physical components of each of the Tivoli products. It also depicts several e-business scenarios with different security challenges and requirements. By matching the desired Tivoli security product criteria, this publication describes the appropriate security implementations that meet the targeted requirements. This book is a valuable resource for security officers, administrators, and architects who want to understand and implement enterprise security following architectural guidelines.

Many large and medium-sized organizations have made strategic investments in the SAP NetWeaver technology platform as their primary application platform. In fact, SAP software is used to manage many core business processes and data. As a result, it is critical for all organizations to manage the life cycle of user access to the SAP applications while adhering to security and risk compliance requirements. In this IBM® Redbooks® publication, we discuss the integration points into SAP solutions that are supported by the IBM Security access and identity management product capabilities. IBM Security software offers a range of identity management (IdM) adapters and access management components for SAP solutions that are available with IBM Tivoli® Identity Manager, IBM Tivoli Directory Integrator, IBM Tivoli Directory Server, IBM Access Manager for e-business, IBM Tivoli Access Manager for Enterprise Single Sign-On, and IBM Tivoli Federated Identity Manager. This book is a valuable resource for security officers, consultants, administrators, and architects who want to understand and implement an identity management solution for an SAP environment.

This IBM® RedpaperTM publication covers the detailed step-by-step installation of IBM Tivoli® Access Manager for Enterprise Single Sign-On 8.1 onto a single-server and a clustered environment. This paper supplements the IBM Tivoli Access Manager for Enterprise Single Sign-On 8.1 Installation Guide and IBM Tivoli Access Manager for Enterprise Single Sign-On 8.1 Setup Guide. Do not use this document in isolation. Check the relevant guides in the Tivoli Access Manager for Enterprise Single Sign-On Information Center as you perform the install. There might be various reasons to install Tivoli Access Manager for Enterprise Single Sign-On into either a single server or a clustered environment. A small-scale deployment, a typical proof of technology, or a proof of concept might be the best examples for a single server installation, whereas larger scale deployments or requirements for high availability and scalability might be reasons to deploy in a clustered environment. This IBM Redpaper is targeted towards administrators and engineers who are facing a Tivoli Access Manager for Enterprise Single Sign-On deployment on either a single IBM WebSphere Application Server or a clustered IBM WebSphere Application Server Network Deployment configuration.

The IBM® Midmarket Software Buying and Selling Guide is tailored specifically to help the management and IT staff of small and midsized businesses evaluate how the IBM midmarket portfolio can provide simple and cost-effective solutions to common business problems. Along with a midmarket customer focus, this IBM RedpaperTM publication is designed to help IBM teams and Business Partners be more effective in serving small and midsized businesses. We illustrate how IBM software for the midmarket can help businesses use the Web to reduce expenses, improve customer service, and expand into new markets. We cover the IBM software offering for the midmarket, which includes what the software does, the platforms it runs on, where to find more information, and how it can help your business become more profitable: - IBM Business Partners often keep a printed copy of this guide in their briefcases for software references - Customers can view this guide online and look up software-value messages and IBM product family offering comparisons - IBM Sales Representatives can print parts of this guide as "leave-behinds" for customers, to give them extra collateral on midmarket software of interest To make sure that you have the latest version of this guide, download it from this web address: http://www.redbooks.ibm.com/abstracts/redp3975.html?Open

Today, security is a concern for everyone, from members of the board to the data center. Each day another data breach occurs. These incidents can affect an organization's brand, investment return, and customer base. Time spent managing security incidents and managing risks can take time away from focusing on strategic business objectives. Organizations need to address security challenges by administering, securing, and monitoring identities, roles, and entitlements with efficient life-cycle management, access controls, and compliance auditing. Those tasks include automated and policy-based user management to effectively manage user accounts and centralized authorization for web and other applications, and also enterprise, web, and federated single sign-on, inside, outside, and between organizations. Increasingly important requirements are the integration with stronger forms of authentication (smart cards, tokens, one-time passwords, and so forth) and centralizing policy-based access control of business-critical applications, files, and operating platforms. This IBM® RedpaperTM publication describes how the IBM Tivoli® Identity and Access Assurance offering can help you address compliance initiatives, operational costs (automating manual administrative tasks that can reduce help desk cost), operational security posture (administering and enforcing user access to resources), and operational efficiencies (enhancing user productivity).