Secure Connectivity Identification and Authentication

The first and most basic steps to protect your corporate data assets are identification and authentication. Identification determines who is the user, while authentication provides assurance that the user is who he or she claims to be. These are prerequisites to controlling access to data and system resources and to maintaining an accurate audit trail of the system’s activity.

OS 2200 systems support a full range of user authentication choices, ranging from user-ids and passwords (managed exclusively by the OS 2200 host system) to plugging into a centralized identity management system for the enterprise network.

No matter how your users are authenticated, OS 2200 gives you worry-free protection for your system’s resources, permitting only authorized access that’s based on a user’s authenticated identity and assigned privileges.

Kerberos

Kerberos-based open security interfaces let you leverage your investment in Microsoft Windows based network authentication into your OS 2200 environment. Kerberos lets you trust the authentication done by other computers by assuring the secure transmission of authentication information. Unisys single sign-on solutions provide full support for Kerberos.

Single Sign-on

Unisys single sign-on solutions can save your end users both time and aggravation – and reduce your security administration and help desk costs too. These solutions eliminate the need for multiple user-id and password combinations that end users must typically use – and remember! Our single sign-on solutions are available:

• As a software-only solution that you deploy on individual PCs to serve as interface gateways between your ClearPath system and your enterprise authentication server, and
• Via Unisys Authentication Sentinel, a self-contained hardware and software solution that eliminates much of your administration costs.

Multi-factor Authentication

Unisys single sign-on solutions provide full support for NTLM, Kerberos, strong passwords and the enforcement of password format rules provided by a network authentication server implementation. They are also compatible with hardware/software identification technology such as smart cards and biometrics. The results? Reduced costs. Greater security. Happier users!