Enterprise and Web SSO
Version3 Simple Sign-On provides the best of both worlds in enterprise and client side single sign-on. By securing the users credentials within Microsoft's Active Directory and using an authenticated client side interface, Version3 Simple Sign-On provides both an easy to implement solution for both Windows and Web SSO projects.

Version3 Simple Sign-On leverages the same administration tools used to manage Active Directory, Active Directory Application Mode (ADAM), Microsoft Identity Integration Server (MIIS) and the Windows Server System (Content Management Server, Exchange, etc.) The fact that administrators only need to learn one console speeds training and improves manageability.

Provisioning
The Version3 Simple Sign-On provisioning interface provides for both on demand and batch mode provisioning and decommissioning of defined applications. The user can be provisioned automatically and their user credentials stored in Microsoft Active Directory for automatic logons. Coupled with Microsoft Identity Integration Server, Version3 Simple Sign-On technology helps organizations manage the business processes that drive application and resource provisioning.

Delegated Administration
Version3 Simple Sign-On provides for both self delegated administration as well as delegated admin for other administrative applications. Because Version3 Simple Sign-On is fully integrated into Microsoft's Active Directory, Version3 Simple Sign-on inherits all the delegated administration features of Active Directory. The user administration console becomes an extension of the Active Directory console and can be delegated securely to administrators that would have the right to set and change user credentials, but not scan individual credentials.

In addition to having delegated administration features, we have enabled enterprise delegation to other administrative applications through our user aliasing feature that would not otherwise be supported. With the aliasing feature, Version3 Simple Sign-On is able to delegate administration of other applications without compromising the security of the enterprise.

Self Service
When merged with the provisioning API, the same interface used for delegated administration is available in a self-service mode that permits users to securely reset their own application credentials without help desk intervention. Version3 Simple Sign-On empowers employees, business partners and customers to reset their own forgotten or expired passwords, create and disable user accounts, update personal profiles, and acquire digital certificates for corporate PKI - all without requiring information security staff to relinquish control. Since the self-service API is integrated into Microsoft's Active Directory, it is also possible to provide robust and secure user subscriptions to published applications. With its unique self-service approach, Version3 Simple Sign-On addresses all of the seemingly conflicting requirements of an identity management system by eliminating the need to manually provision and manage user profiles, passwords, accounts, and digital certificates.

Auditing and Reporting
The Version3 Simple Sign-On Application Monitor provides the ability to monitor and respond to user initiated desktop applications. A complete audit trail for application access and even content monitoring can be created and integrated into enterprise auditing systems. Version3 Simple Sign-On audit API has been designed with security and regulatory compliance in mind. The solution provides active notification of specified events, measurements and reporting, and user accountability and tracking. Version3 Simple Sign-On records the details of each user request for a managed resource, as well as changes made within the directory.

Application Publishing
A key component to managing application access is the ability to present the users with the applications they need, when they need them. This is accomplished using the application-publishing component of Version3 Simple Sign-On. The system creates the necessary desktop icons on the user's desktop based on user access to specific applications. This is not limited to applications that are configured to use the identity management feature of Version3 Simple Sign-On, but any application.

Connection Management
Managing connections to network printers and network drive shares on servers has long been a key requirement to managing application access. Up until now, most administrators relied on batch files or scripts to control these connections. In some cases technicians must visit each computer to manually make the necessary connections. With Version3 Simple Sign-On, printer connections and drive mappings can be controlled from within Active Directory and applied, based on the user account, a group to which a user belongs, or the computer that is in use. This allows a granularity not seen before in connection management.

Summary
Application access management is a crucial issue that many organization are dealing with and until now had to use many disparate products to resolve. With Version3 Simple Sign-On, there is an application access management solution that can truly meet the demands and requirements to satisfy those needs.