Centralized Access Control and Single Sign On (SSO)

IBM Tivoli Access Manager (TAM) provides centralized administration of security policies and an authorization engine that is abstracted from the applications that it protects. TAM is available for e-business (Web), Operating Systems (UNIX/Linux), and Business Integration (MQ). The newest member of the TAM family, TAM E-SSO (Enterprise Single Sign On) provides a single sign on client that can be integrated with Active Directory or other Tivoli Security software to provide a single logon experience for end users.

TAM for e-business is the most popular TAM product. It controls both wired and wireless access to applications and data, and provides Single Sign-On (SSO) for authorized users into web-based application systems and portals. It integrates with e-business applications to deliver a secure personalized e-business experience for authorized users. It includes many enhancements for integrating and securing both J2EE and . NET applications.

The primary difference between the SSO features of TAM for e-business and TAM E-SSO is as follows:

• TAM for e-business requires users to authenticate, and the system is then integrated with web-based applications only for tightly or loosely coupled single sign on. In tightly coupled SSO, TAM for e-business and the protected application share the same user registry and some type of trusted authentication or token. In loosely coupled SSO, TAM for e-business provides a user id and password to the application it is protecting on behalf of the TAM authenticated user.

• TAM for E-SSO is primarily a desktop SSO solution. A windows based client contains stored credentials in a local secure cache. When applications that are configured for SSO are opened, TAM E-SSO literally populates the user ID and password into the fields on behalf of the user, so that the user does not have to key them in or remember them. This solution can be deployed to allow centralized administration of the credentials stored in Active Directory, or localized so that they are self managed by the end user.

Tivoli Access Manager (TAM) also helps to manage growth and complexity, control escalating management costs, and tackle the difficulties of implementing security policies across a wide range of Web and application resources. TAM helps provide partners, customers, suppliers and employees with secure access to business-critical applications and data for highly available and scalable transactions. It also helps companies reduce development time and cost for new e-business applications.

IBM Tivoli Access Manager for e-business on IBM.com