BlueFort Security Ltd -

SP4 for Authentication Manager 7.1 brings some significant enhancements in terms of functionality as well as many fixes.  We have highlighted some of the best new features below:

SMS Authentication Options Extended

Support has been introduced for other SMS operators that support HTTP.  This will enable customers to use a preferred provider, potentially allowing for lower cost SMS authentications.  In addition, using a supported hardware SMS gateway will give the customer complete control over the SMS solution without having to reply on 3^rd party internet connectivity.

There are a number of Configuration Guides available for certain providers, and also documentation for some SMS modems.

System Snapshots

System snapshot creation prior to applying upgrades provides additional assurance that that in event of failure, the server can be rolled back.  This new feature reduces the risks involved in performing system updates and upgrades because In the event of a failed upgrade, the system can be rolled back to the exact same status as prior to the upgrade. This should result in less downtime for customers in the event that an update does not go to plan.  By allowing the server to be returned to a previous state, it also provides a greater flexibility in the way that further upgrades can be attempted.  The behaviour of system snapshots is configurable or could be disabled if needed.

Identity Source Clean-up

Identity source clean-up options have been improved.  Prior to SP4, clean ups could only be scheduled.  Now clean-ups can also be run on an ad-hoc basis providing the customer with more control.  Additional settings can be specified such as to only clean up disassociated users after a certain number of days and also do not run the clean-up if more than a certain number of disassociated users are found.  This is intended to prevent an accidental modification to the identity source resulting in, for example, all tokens being unassigned from users.

Simplified Replica Promotion process

The promotion process can now be done entirely from the GUI, ensuring that administrative access can be restored quicker and more easily in the event of a disaster.  By moving this functionality to the GUI, it also greatly reduces the chance of an administrative error during the promotion process.

Ability to Track Users Who Have Moved Within a Directory

This new feature enables Authentication Manager to find users who’s DNs have changed.  This is an important new feature because it is a fact of life that directories are dynamic and are often updated to reflect the changing nature organisations. The Authentication Manager is now able to cope with these changes.

Enhanced Control of Group Membership

Users in an external Identity Source(IS) can now belong to a group in the internal Authentication Manager database.  This will potentially make upgrades from Authentication Manager 6.1 much more straight-forward and It will also provide customers with more flexibility around group memberships.  Group membership for AD users will no longer need to be controlled directly from AD.

Further details on this new release can be found here.  We urge all of our customers to speak to us before updating their systems to ensure that all pre-requisites are met and get the most up-to-date advice on the best way to proceed for your particular environment.