«Avanpost» 3.0 - Integration of Android tablets and smartphones in the corporate system of authentication and access control
The company announced the completion of the outpost system design single authentication (SSO, or Single Sign-On) for tablets and smartphones on Android. Functions included in the SSO module Avanpost Mobile software package (PC) "Outpost 3.0."
As the developers of the system, a mechanism for SSO for the most common mobile platform, integrated with IDM and PKI, dramatically increases the security of mobile and remote locations, the popularity of which is growing rapidly in enterprises of all sizes and all areas of activity. Consequently, according to the company, its new development is of primary interest for virtually any organization, including those that apply the concept of BYOD (Bring Your Own Device) - the use of personal mobile devices employees to work with corporate information.
Using the new version of Avanpost Mobile, the user automatically (without entering a username and password), begins to work on any of your mobile device with protected internal corporate Web-resources (intranet portal, corporate web mail Microsoft Outlook Web App, etc.) systems, VoIP- telephony , video, and video conferencing (eg, Skype, SIP), as well as any Android-applications that are clients of the corporate information systems (CRM, ERP, HR, accounting, etc.) and cloud Web-services. Thus, the mobile device is provided by the main advantage of SSO: Users do not need to remember multiple IDs pairs, an organization can enforce security policies requiring the use of long persistent hard to remember, frequently changing passwords that also vary across applications.
The basic system configuration Avanpost Mobile done on the server PC «Avanpost», controlling which applications are available to the employee certain mobile devices (the generation and update passwords provides the main IDM-core PC «Avanpost»). It also formed a unique PIN-code mobile device, wherein the presence of the respective modules PC system «Avanpost» can print PIN-envelope, which prevents access to the system administrator for this information. Note that the use of mobile devices using the same infrastructure that monitors the users on laptops and desktop PCs. For example, on a mobile device to enter the same PIN-code as a hardware USB-token user. At the same token to connect to your smartphone or tablet is not necessary - information about certificates and passwords, taken directly from the store PC «Avanpost». This scheme is the most user-friendly and, at the same time does not reduce the level of security of the system.
At the same mobile device just need to install Android-app, and for his work does not require being root. The latter fact is extremely important, because "rutirovanie" creates a gap in the embedded system security platform Android, and can also cause problems for warranty repairs.
Avanpost Mobile runs on any version of Android, starting with version 2.3.
No comments: