Aladdin eToken SSO
Token-based approach, easy setup.
Installation and documentation might be simplified.
An intuitive and practical single sign-on solution.
Aladdin's eToken SSO solution is based on the use of USB tokens upon which information is stored, including user data, application profiles and, if you wish, other certificates. This makes for a particularly intuitive operation as, once everything is set up, you just plug in your token and enter your password once. And when you have finished, simply remove the token.
It is necessary to install the eToken run-time environment before installing the client software and the eToken template manager. Templates are created for the various applications to be protected (ideally by the systems administrator) and then users may create application profiles. These profiles are stored on the portable token, although they may also be backed up to disk if required. Backup data can be wiped securely.
There is also a useful set of associated utilities, including a certificate converter that enables you to copy other certificates on to the token for safe keeping, a formatting utility to restore the token to its initial state, an application viewer to view what is on the token, and a password quality tool.
The utilities are nicely presented and work well, as do the client software and template manager. These primary application blocks are each installed separately, however, whereas it would be more convenient to allow their selection from a common dialog.
PDF documentation is well-considered and should help even novices find their way around, but some might wish it were more technical with fuller descriptions.
Everything worked well and there were no hiccups in installation or use, with eToken seamlessly providing the various passwords required by applications. This is a simple single sign-on solution that will appeal especially to the standalone user or small work group.
The tokens are physically robust and provided on a key ring with a hard plastic protective sheath.
It may not be the most sophisticated approach to single sign-on, but it is eminently practical and easy to understand.