The new solution also gives end users an option to provide much needed Single Sign-on (SSO) to address the password sprawl associated with these new technologies.
Factors like increase in mobile workforce, gradual adoption of Bring-Your-Own Device (BYOD) by the companies and adoption of SaaS applications has increased security risks being faced by the organizations. In order to achieve compliance, necessity for centralized management of users' digital identity and access to cloud services cannot be ignored.
Centrify's new Identity-as-a-Service (IDaaS) offering, DirectControl will be unveiled and demonstrated for the first time later this week. It allows users to securely utilize their existing Active Directory credentials to get Single Sign-on to their SaaS apps from a web browser running on any system, laptop or mobile device. In addition,it also offers the robust MyCentrify portal where users receive one-click access to all their SaaS apps. The company also offers "Zero Sign-On" (ZSO) from mobile devices running iOS or Android, and supports both browser and native rich mobile apps through the secure certificate delivered to their mobile devices enrolled with the Centrify Cloud Service.
The new cloud-based service easily integrates with Active Directory leveraging the existing technology, skillsets and processes already established. No major changes to the firewall or Active Directory are required and the Active Directory is never replicated or duplicated in the cloud. Single Sign-on also improves security and critical tasks such as de-provisioning user access across multiple apps, devices and resources are easily achieved by simply disabling a user's Active Directory account. The company claims to support for more than 400 operating systems and dozens of on-premise apps, and rich support for mobile devices apart from the SaaS and Cloud Services support announced.
This new service contains some key components to perform different functions. MyCentrify portal is an Active Directory-integrated and cloud-delivered user portal that provides interface for SaaS Single Sign-on and certain device reset options. Centrify Cloud Service is a multi-tenanted service, built on Microsoft Azure that provides secure communication from on-premise Active Directory to SaaS applications accessed from the MyCentrify user portal. Centrify Cloud Manager is an administrator interface into the Centrify Cloud Service. Centrify Cloud Proxy seamlessly leverages and extends Active Directory to SaaS applications and mobile devices via Centrify Cloud Services.
"Many of the existing solutions for SaaS SSO do not address what users want and what IT requires," said Corey Williams, Centrify senior director of product management. "Single Sign-on needs to address both browser and mobile access to apps regardless of whether those apps are on premise or in the cloud. We've architected our solution from the ground up to accommodate these scenarios, and with Centrify you can utilize your existing identity infrastructure to go beyond SSO with access control, privilege management, policy enforcement and compliance."
DirectControl for SaaS is currently in open beta and is expected to be generally available by early next year.