Google Apps Integration
Moving to Google Apps or other Cloud-based solutions brings huge benefits to the business in terms of reduced costs, and agility. However in order to maximise on these new inititives it is also important to understand that many mission criticial services will remain on premise.
The Google Apps Directory Sync can import passwords from LDAP, but only in an LDAP attribute that stores passwords in plain text, unsalted MD5, or unsalted SHA-1 format. Other password encryption hashes are not currently supported, nor are salted hashes. Most directory servers do not support these formats natively, and would require a custom Active Directory Password Filter to store a SHA-1 or unsalted MD5 hash of the password within a defined attribute within Microsoft AD.
Active Directory Password Filter
Many commercial Identity Management solutions currently available on the market utilise the Password Filter to capture password changes in order to facilitate password synchronisation. Cloud Technology Solutions have developed custom Password Filter DLL’s that are supported and maintained. This will provide the necessary password hash and stored in an attribute of choice in order to synchronise password changes to Google Apps.
User & Identity Management
- Managing the user identity lifecycle with delegated administration and user self service
- Providing and integrating directory services
- Managing role based access control to enterprise and web based services
- Identity Federation with trusted organisations
Single Sign On
Single sign-on solutions allow users to authenticate once to gain access to multiple applications and systems. This solution removes the need for users to remember and manage multiple logins and passwords. In doing so, single sign on reduces help desk calls without reducing security. The solutions support terminal-based, Microsoft Windows, Java and web applications and can work whether connected or disconnected from the network.
Comply with the current legislation governing data security by enforcing strict password policies and remove the need for users to scribble passwords on post-it notes and pieces of paper left on desks and stuck to monitors . Our single sign-on solutions work with smart cards, proximity cards, tokens and biometrics.