User Management

RSA ClearTrust® software provides out-of-the-box user self-service and automated approval workflow capabilities, which help to relieve IT staff from mundane and costly manual processes. Self-service functions include account creation, group assignments, profile updates and password resetting. The automated approval workflow functionality provides a flexible workflow engine that enables enterprises to efficiently model their business processes and policies.

User Access Privilege Management

The RSA ClearTrust web access management solution is a rules-based solution that allows or denies access based on definable user attributes. By employing customizable Smart Rules technology®, RSA ClearTrust technology enables organizations to define access privileges to individuals or groups of users in a range of granularities.

Smart Rules technology dynamically makes access decisions by determining whether a user meets established criteria at the moment of request. Using native language and Boolean constructs, Smart Rules technology enables organizations to quickly translate "business rules" into online web access management policy. Depending on the size of the user base and the granularity of the rules, this can all be done in a matter of hours, significantly accelerating deployment.

Transactional Smart Rules technology extends the use of user properties to leverage the enterprise’s existing data repositories. By allowing for real-time dynamic authorization decisions from one or more remote data repositories, Transactional Smart Rules technology adds value to enterprise information and speed deployment of the solution.

Web Single Sign-On (SSO)

RSA ClearTrust software enables transparent SSO within or across multiple web sites or domains. When users successfully authenticate themselves at an RSA ClearTrust software-protected site, they do not have to re-authenticate themselves when visiting other protected sites—even partner or other corporate sites in different domains. Because users no longer need to try to remember multiple passwords, this leads to a reduction in help-desk costs. In addition, external sites can offer a personalized web page based on the user’s credentials, which improves usability.

Authentication Policy Management

In addition to providing web access management capabilities, RSA ClearTrust software centralizes the management of authentication services—both user-based and resource-based—to provide more flexibility. This enables support of a variety of authentication methods, including user name and password, certificates, RSA SecurID tokens, smart cards, LDAP authentication and custom methods. Organizations can choose the most appropriate method (whether an RSA Security technology or third-party product) based on the value of the resource, confident that RSA ClearTrust will interoperate fully.

Auditing and Reporting

RSA ClearTrust software provides end-to-end auditing of all transactions, with full reporting of all security events. The audit trail begins with detailed logs that serve as proof of activity, providing the non-repudiation that organizations require to conduct business electronically. Similarly, audit logs can be used by the administrator to prove that specific user activity occurred, enhancing security and compliance. For reporting, data can be sorted and filtered by a variety of attributes.

Delegated Administration

RSA ClearTrust software has granular, multi-tier delegated user management capabilities, enabling organizations to distribute key administrative tasks to various business units. Each business unit administrator would then be able to assign users and define functionality for his or her specific user base—yet, for security reasons, not be able to see or modify the user profiles or capabilities of other departments. Because these responsibilities are spread over discrete business units, it is faster and more efficient to deploy, update and revoke access privileges and user identity attributes.