DIGIPASS Authentication for TAM - Vasco

More documents

Recommendations

Info

5 DIGIPASS Authentication for TAM DIGIPASS Authentication for TAM 2 About TAM Authentication TAM provides authentication and authorization services for web based resources by means of a reversed proxy. This reversed proxy, called WebSEAL, sits between the enduser’s browser and the organization’s web servers. It intercepts HTTP requests and performs authentication and authorization checks for protected resources. The following figure illustrates this process. The first time a user requests a protected web resource, WebSEAL will challenge the user for authentication. 1. The user sends his authentication information by means of an HTTP request to WebSEAL 2. WebSEAL extracts the authentication information and forwards it to the CDAS module 3. The CDAS module verifies the authentication data against an external resource 4. The CDAS module passes the verified identity back to WebSEAL (or an authentication failure message) 5. WebSEAL builds a valid internal credential for the user Finally, WebSEAL uses this internal credential to validate the user’s request. WebSEAL provides out-of-the-box CDAS modules that deal with: Username/password authentication One-time password authentication for SecurID Client-side X.509 certificates However, on top of this WebSEAL provides a developer’s toolkit for building custom CDAS modules. This toolkit has served as the basis for building the CDAS module that supports both Static and Dynamic DIGIPASS authentication tokens.
6 DIGIPASS Authentication for TAM DIGIPASS Authentication for TAM 3 About VASCO and DIGIPASS authentication VASCO secures the enterprise from the mainframe to the Internet with infrastructure solutions that enable secure e-business and e-commerce, protect sensitive information, and safeguard the identity of users. The company’s family of DIGIPASS® and VACMAN® products offer end-to-end security through authentication, digital signature, and Radius and Web security, while sharply reducing the time and effort required to deploy and manage security. The VASCO DIGIPASS product family consists of a set of hardware and software tokens that provide authentication and digital signature services. The following authentication mechanisms are supported: Dynamic pin code (One time password) Static + Dynamic pin code Challenge/Response The VACMAN product family facilitates the integration of strong DIGIPASS authentication into security-critical applications. One of the products in this family is the VACMAN Controller. It provides DIGIPASS strong authentication and signatures mechanisms natively into any application, in the form of an API regardless of your preferred OS (Operating System) or communication protocol, database management system or GUI (Graphical User Interface), from PC to mainframe. The integration between DIGIPASS and TAM, as described in this paper, supports both dynamic and static + dynamic pin codes. It uses the VACMAN Controller API from within the CDAS module to verify the pin code. The following figure illustrates the combination of a DIGIPASS token and the VACMAN Controller.
Page 1 and 2: WHITEPAPER DIGIPASS Authentication
Page 3 and 4: Table of Contents 2 DIGIPASS Authen
Page 5: 1 Preface 4 DIGIPASS Authentication
Page 9 and 10: 8 DIGIPASS Authentication for TAM D
Page 11 and 12: 10 DIGIPASS Authentication for TAM

DIGIPASS Authentication for TAM - Vasco

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?