
| Risk-based Authentication | Event Analysis | ||
| Self-service | Single Sign-on (SSO) | ||
| Password Management |
Risk-based Authentication is matching the level of authentication to the expected impact of the surrounding events. Simply put, risk-based authentication dynamically establishes the level of credibility of each user in real-time and uses this information to change the level of authentication required to access an application.
Event Analysis evaluates the relationships between such events as the time of day that users access an application, the network, the type of device and so forth. By establishing a baseline of event relationships over time, surrounding events can be analyzed and meaningful situations can be discovered, allowing the admin to be alerted and/or take real-time action.
Self-service functionality can assist with password resets, recoveries and account unlocks. By using multiple security questions and answers functionality PortalGuard is able to perform all resets directly from the end-user's machine if desired. This also includes Offline Mode, which allows the forgotten password to be shown to roaming users in clear text when they are offline, so as to continue work without returning to the office.
- Web-based Application SSO: internal users as well as external users from customers, to partners, to vendors and even suppliers, all want seamless access to hosted web-based applications. For web applications, PortalGuard provides seamless web-based SSO through SAML SSO.
- Desktop Application SSO: employees want seamless access to client-side applications while eliminating password prompts. For the desktop, PortalGuard allows SSO to thick-clients which would normally cause technical hurdles and additional password prompts.
PortalGuard’s Password Management will increase the security of passwords by adding features such as more granular password quality rules, history, expiration and lockout due to incorrect logins. This is especially beneficial for applications failing to meet compliance requirements, such as homegrown web applications or custom SQL user repositories. Administrators can easily manage multiple password policies while users are given usability features such as password meters and password expiration reminders synched with their email client calendar.