RSA Access Manager
Web Access Management Solution
RSA Access Manager data store
Sorry, this product is no longer available, please contact us for a replacement.
Overview:
RSA Access Manager enables organizations to centrally manage authentication and authorization policies for a large number of users, online web portals, and application resources. Access Manager empowers enterprises to deploy applications more quickly while providing seamless user access with single sign-on (SSO).
What's more, Access Manager is Common Criteria EAL3+-certified.
Access Manager provides the following features:
- Policy-based access controls – Mitigate risk and protect online assets. Ensure only authorized users can access sensitive data within web-based applications.
- Centralized policy management – Reduce costly administration associated with managing authentication and authorization policies separately across multiple applications. Quickly gauge compliance levels and reduce audit costs.
- Unified access control – Achieve unified access control across multiple applications. Reduce IT complexity and administrative costs through centralization and elimination of redundant infrastructure.
- Fine-grained access controls – Mitigate risk with access privileges by select attributes like job function and responsibilities.
- Web single sign-on – Provide a better user experience by allowing your employees, customers, and partners to sign into your web portal just once.
- Delegated administration – Distribute user and access policy management responsibilities.
- Context-aware authentication – Combine single sign-on with risk-based authentication to protect higher-risk resources from fraud.
Essentials
Secure Access
- Enforces access to Web applications based on risk and context
- Centralizes security and enforces business policy
- Integrates with RSA ® Adaptive Directory to provide a single virtual identity source
Web Single Sign-on
- Enhances user experience Robust Authentication
- Integrates with a broad range of authentication methods
Secure Access To Web Applications:
The global market is driving an insatiable appetite for business models that turn digital information into competitive advantage. The need for anytime, anywhere access to this digital information is shared by employees, customers, and partners. RSA ® Access Manager helps organizations cost-effectively provide secure access to web applications. With RSA Access Manager, companies can secure access to web applications, consolidate access controls for enhanced security, benefit from an improved user experience, and accelerate application deployment. The solution also enables new web business opportunities while reducing administrative costs.
Web Single Sign-On
RSA Access Manager provides organizations with secure access to web applications. It provides transparent, single sign-on (SSO) access for a positive user experience, while cost-effectively managing user entitlements to sensitive data. Enabling SSO improves communication and facilitates business with customers, strengthens partner relationships, and bolsters employee productivity. RSA provides end-to-end security for web portals to ensure that every user has secure, convenient access to the information and resources they require.
Contextual Authorization
RSA Access Manager meets today’s demands for anywhere, anytime data-access. RSA Access Manager is designed to centrally manage user privileges for web access based on user attributes, business rules, and security policies. For optimal flexibility, business rules include both dynamic and transactional Smart Rules ® functionality. The solution delivers contextual authorization, enforcing access based on a specific risk, business context, per security policy. Contextual authorization is an essential control to mitigate the risks related to unauthorized access.
Robust Authentication Capabilities
Providing enhanced security is at the core of everything RSA does. RSA Access Manager allows you to choose from a broad range of authentication methods to augment strong access controls. Choose from basic user credentials, Integrated Windows Authentication (IWA and Kerberos), x.509 certificates, RSA SecurID ® two-factor authentication (including support for risk-based authentication features in RSA Authentication Manager 8.0), and RSA Adaptive Authentication risk-based authentication, among others. You decide on the authentication method, or combination of methods, based on your acceptable level of risk. Tight integration between RSA Access Manager and RSA’s risk-based authentication technology allows you to verify users for all web applications (or on a per-application, per-URL, per-sub URL, and per- resource basis) with support for RSA Adaptive Authentication types such as challenge security questions, and out-of-band phone, email, and SMS OTP authentication
Integration With RSA Adaptive Directory: A Single Identity Source For Secure Access
In today’s heterogeneous identity environments, identifying who your users are is a major challenge. Identities are spread across disparate data silos – including LDAP directories, Active Directory, databases, and applications – and the same identity often exists in more than one source. This makes it difficult to create a comprehensive list with each user represented only once for efficient authentication, or to build an attribute-rich profile of each user for fine-grained authorization.
RSA Access Manager integrates with RSA Adaptive Directory to provide a flexible virtual identity service. RSA Adaptive Directory delivers an authoritative and global view of identity on top of your existing identity infrastructure. It leverages model-driven virtualization to externalize identity from disparate data silos into a common, interoperable service. RSA Access Manager receives user attributes from a variety of identity stores so that it can perform richer, attribute-based authorization with a complete identity picture. This flexible, scalable virtualization layer hides the heterogeneity of your existing identity sources, providing simple, logical, standards-based access to all the identities within your organization—no matter where or how they are stored. A flexible identity service is critical to understanding who your users are and enabling secure access.
RSA Access Manager data store
Integration With Existing It Business Infrastructures:
To provide a truly unified security-management solution, RSA Access Manager software enables tight integration into your complex, multi-vendor infrastructure — including web servers and application servers. It also provides native support for databases and directory servers, allowing you to leverage your existing user data stores.
Heterogeneous Application And Platform Support
The quickest way to achieve a return on investment from a web access management solution is to get it up and running on the systems and applications already deployed. RSA Access Manager software is available on a wide array of platforms to meet customer needs. The Secured by RSA Partner Program, one of the oldest in the security industry, ensures that RSA Access Manager Ready applications have passed rigorous testing and certification and are fully supported.
Support For Microsoft Sharepoint 2010
To further enable internal and external facing web applications, RSA Access Manager has extended support to Microsoft SharePoint 2010 with claims-based authentication. Combined with Microsoft SharePoint classic-based authentication support, RSA Access Manager provides broader infrastructure support with proper authentication into web applications without costly modifications to existing Windows environments.
Flexibility And Extensibility
RSA Access Manager software integrates with existing data repositories, web servers, and application servers, so you can deploy with “plug and play” speed. RSA Access Manager makes it simple to map business rules to user-access policies. Easy deployment allows businesses to benefit from significantly reduced time to market for critical projects, whether they are incorporating new sites, integrating partner sites, or adding new applications. Equally important, RSA Access Manager technology offers a powerful suite of robust APIs engineered to allow easy extension of the solution to meet custom requirements.
Performance And Scalability
RSA Access Manager software offers exceptional scalability and performance, to grow with infrastructure requirements. The product has been proven – in live customer environments and independent testing – to meet the scalability and raw throughput requirements of user populations numbering into the tens of millions. It is also designed to enable delegated administration and automated policy updates, alleviating the bottlenecks that plague growing infrastructures.
Specifications:
| Product Specifications | ||
|---|---|---|
| Current Version | RSA Access Manager 6.2 | |
| Supported Operating Systems | Microsoft Windows Server
Red Hat Enterprise Linux (RHEL)
IBM AIX
|
SUSE Linux Enterprise Server
VMware
Sun Solaris
|
| Supported Data Stores |
|
Sun
Oracle
Novell
Sybase
Forge Rock
|
| Secured By RSA Solutions | A number of other data stores are supported. | |
| Supported Browsers | RSA Access Manager supports all browsers which support the use of “cookies.” The following list of browsers have been officially qualified against RSA Access Manager:
|
|
| Supported Authentication Methods |
|
|
| Supported Web Servers | Microsoft Internet Information Server (IIS)
Microsoft SharePoint Server 2007 Microsoft SharePoint Server 2010 Sun Java Systems Web Server
Apache HTTP Server
|
IBM HTTP Server
Microsoft Forefront TMG 2010 Domino 8.5 |
| Supported Application Servers | Oracle WebLogic server 11g R1 IBM WebSphere application server
RedHat
|
Apache
Supported Java Development Kit Versions
Other
|
| Supported Portal Servers | BEA Weblogic Portal
|
BM WebSphere Portal
|
| Supported RSA Access Manager APIs |
|
|
| Supported RSA Products |
|
|
| Supported Security Standards | Federal Information Processing Standard (FIPS 140-2) | |
Documentation:
Download the RSA Access Manager Data Sheet (PDF).
Pricing Notes:
- Pricing and product availability subject to change without notice.