|
________________________________________________________Truth and Fiction with SSO
Executive Summary Technology products always seem to come "out of the box" strong and then wither amidst strong scrutiny. This was the case with Single Sign-on (SSO). What is sometimes ignored, however, is that any product with a strong need will reinvent itself to address the problems it contains.
It is time for individuals to evaluate (or re-evaluate) SSO for their enterprises. There are a number of myths that are now overcome by the technology:
. You can get true SSO.
. User account risk is reduced.
. ROI is attainable.
. Customers are happy with their solutions.
This paper describes interviews and research associated with the value of single sign-on. It discusses key myths that were associated with SSO in the past and no longer apply to today's technology.
About Spire Security
Spire Security, LLC conducts market research and analysis of information security issues. Spire provides clarity and practical security advice based on its "Four Disciplines of Security Management," a security reference model that incorporates and relates the functions of identity management, trust management, threat management, and vulnerability management. Spire's objective is to help refine enterprise security strategies by determining the best way to deploy policies, people, process, and platforms in support of an enterprise security management solution.
This white paper was commissioned by Imprivata®, the makers of OneSign. All content and assertions are the independent work and opinions of Spire Security, reflecting its history of research in security audit, design, and consulting activities.
Imprivata can be reached at www.imprivata.com.
© 2005 Spire Security, LLC. All rights reserved. i ________________________________________________________Truth and Fiction with SSO
Truth and Fiction with Single Sign-on
Table of Contents
INTRODUCTION ...................................................................1
INTRODUCING THE COMPANIES ....................................1
TRUE SSO - FANTASY OR REALITY? ...............................2
The Myth................................................................................................2
The Reality.............................................................................................2
The Spire Verdict..................................................................................2
DOES SSO INCREASE RISK?................................................3
The Myth................................................................................................3
The Reality.............................................................................................3
The Spire Verdict..................................................................................4
IS THERE ROI IN SSO? ..........................................................4
The Myth................................................................................................4
The Reality.............................................................................................4
The Spire Verdict..................................................................................5
DO CUSTOMERS REGRET THEIR PURCHASE? ..............5
The Myth................................................................................................5
The Reality.............................................................................................5
The Spire Verdict..................................................................................6
THE IMPRIVATA EFFECT ....................................................6
SPIRE VIEWPOINT................................................................6
© 2005 Spire Security, LLC. All rights reserved. ii__________________________________________________________Truth and Fiction with SSO
Introduction Every new product brings with it high hopes and leaves behind bitterness before it evolves into the promising solution it can be. Single Sign-On (SSO) was introduced to security years ago along with distributed appl... [download for more]
|
