Home | Press | Contact Us | Testimonials | Clients | Sitemap

SINGLE SIGN-ON (SSO) & IDENTITY MANAGEMENT

Assessment, Product Evaluation & Implementation

The challenge for organizations is that users want easy and secure access to aggregated data across multiple systems. These systems include mainframe, distributed, Internet as well as mobile devices. For example, critical client information such as patient data, typically resides on disparate systems and applications across multiple platforms. Employees want to review all relevant sensitive data before making decisions related to their job role and responsibility. There is a strong need to support the capability to centrally monitor and report (audit) access across all applications. This requirement can be met by implementing a single sign-on (SSO) and an identity management solution that is tailored to your systems and applications.

OUR SSO - 360° SUITE OF SERVICES

ecfirst delivers a 360° solution in the area of SSO, identity management and context management. The ecfirst solution is focused on working collaboratively with your organization to conduct a rapid assessment and planning workshop to establish critical requirements. This provides the foundation to identify appropriate vendor and product solution options for the implementation of an SSO system. ecfirst further can assume responsibility for product demonstration and evaluation and the final step of deployment and implementation to meet your specific application and system requirements.

Our solution is based on an initial 2-day On-Site SSO Assessment Workshop to review your business and technology requirements and establish core parameters for an enterprise SSO initiative. The ecfirst team consists of credentialed professionals with years of experience designing and successfully implementing SSO, and identity management solutions that are customized to work in client environments.

WHY SSO?

With a secure SSO solution, end-users will need to remember one password for access to key systems and applications they are authorized to use. Our SSO workshops are designed to leverage industry best practices with the unique challenges and priorities of your organization to address user credential and integrated information challenges.

For example, take the case of a healthcare environment. This environment is particularly challenging because it requires:

  • Caregivers may share a limited number of workstations
  • Applications and information accessed is typically very sensitive and spread across several systems and applications
  • Compliance requires audit trail of access to patient information
  • Sign-on typically expected in seconds (quality of care is impacted by ability to access integrated information about patient across several applications)

Organizations want an easy-to-deploy solution that is secure and efficient and simplifies accessing multiple password-protected Windows, Linux, Web and host-based applications. Users who share workstations need to be able to switch in seconds instead of performing a time-consuming full logon/logoff procedure.

OUR COMMITMENT TO YOU

ecfirst will:

  • Analyze existing policies, processes, and technologies that impact or influence SSO
  • Profile critical applications and IT infrastructure documenting criteria meaningful to SSO planning and design
  • Document the current state of SSO
  • Document the end state SSO organization, functional, and technical requirements and business objectives
  • Conduct a workshop with participants to outline potential approaches and work towards a consensus solution that synthesizes client requirements and industry best practices
  • Perform a gap analysis of the current state to the end state
  • Provide written detailed findings and recommendations
  • Provide written assessment results and recommendations of two or three eligible vendors for pricing comparisons and negotiation leverage
  • Coordinate proposal or RFI/RFP activity for your organization
  • Analyze SSO proposal/RFP responses to establish short list of vendor/product solutions for demonstration and evaluation
  • Deploy and implement selected product technology and customize solution based on established requirements from SSO assessment workshop

The ecfirst scope criteria are influenced by business requirements and your unique technology infrastructure. The ecfirst SSO recommendations are based on:

  • IT infrastructure and systems, including network structure, server structure and operating systems architecture
  • Supporting directory services
  • Supporting critical applications
  • Self service application reset strategy and architecture
  • Security considerations

YOUR COMMITMENT TO US

  1. Interviews with key members of IT staff and management.
  2. Communication and associated documentation of key requirements for all critical applications and systems that the SSO solution must address.

OUR DELIVERABLE TO YOU

Our initial 2-day On-Site SSO Assessment Workshop  will result in a complete report of our findings – in an organized format - outlining the core requirements for successfully implementing SSO in your business environment.  This document will clearly establish a short list of recommend vendors and their products, as well as an RFI that may be used to get further detailed information from vendors that is based on your specific SSO application and system requirements.

We can next take responsibility and assist your organization with product demonstration and evaluation resulting in the final deployment of the selected solution that is tailored to your established requirements.

Fixed Fee with No Expenses: Call for details and a customized proposal exclusively for your organization.

COMPLIMENTARY EXECUTIVE BRIEF ON ENTERPRISE SSO

For a complimentary executive broef PDF document on Enterprise SSO, please contact Nazeela Shokrai at Nazeela.Shokrai@ecfirst.com.

About ecfirst

ecfirst delivers world-class information security, regulatory compliance solutions and its professional services team enables businesses address IT staffing challenges every day. With over 900+ clients, ecfirst was recognized as an Inc. 500 business – America’s Top 500 Fastest Growing Privately Held Business in 2004 – our first year of eligibility. ecfirst assists organizations with their compliance initiatives for a secure information infrastructure that is compliant with regulations such as PCI DSS, HIPAA, Sarbanes-Oxley, ISO 27002, or federal and state legislations. ecfirst serves a Who's Who client list that includes technology firms, numerous hospitals, state and county governments, and hundreds of businesses across the United States and abroad. A partial list of clients includes EMC, IBM, Principal Financial, U.S. Army, U.S. Dept. of Homeland Security, U.S. Dept. of Veterans Affairs and many others.

Information Security & Compliance
ecfirst delivers deep expertise with its full suite of services that include Single Sign-On (SSO), context management, contingency planning/Business Impact Analysis (BIA), vulnerability assessment, as well as managed compliance, security and IT infrastructure solutions. ecfirst has successfully executed fixed price, fixed deliverable, turnkey projects across the United States.

World-class IT Professional Services
The ecfirst Professional Staffing Practice excels in meeting your short and long term requirements for contract professionals in the areas of Web development, system, database and network administration, application development, system architecture, and project management. This practice is distinguished with credentialed staff (PMP, CBCP, CISSP, CSCS, CHSS or others that may be required) that includes deep industry knowledge in the healthcare, financial, technology and government markets.

Compliance and Training Certification
The ecfirst compliance training program is exclusively endorsed by the American Hospital Association (AHA). The Certified HIPAA Administrator™ (CHA™), Certified HIPAA Professional (CHP) and the Certified HIPAA Security Specialist™ (CHSS™) certifications are the gold standards in the Industry. The ecfirst Certified Security Compliance Specialist™ (CSCS™) Program is the first and only information security program that addresses all major compliance regulations from a security perspective.

Talk to ecfirst.com and you will find an organization that is passionate about the services we deliver and exceptionally devoted to its clients. For more information, please visit http://www.ecfirst.com/