Strengths: Full multi-factor and single sign-on authentication management
Weaknesses: Nothing that we found
Verdict: A myriad of features with good deployment choices
SecureAuth IdP combines a multitude of authentication and identity management features. It can be installed as an on-premise or cloud-based deployment for managing single sign-on and two-factor authentication for many facets of the enterprise infrastructure. It can also manage authentication for web and mobile applications, VPN and gateway authentication and cloud-based resources.
SecureAuth can plug directly into the existing Active Directory structure to leverage existing user accounts and security policies. It also features quite a bit of identity management functionality to further enhance user and authentication management capabilities.
We found initial setup of this product to be straightforward and easy to complete, and it consisted of deploying the virtual IdP appliance in our environment and then tying it to our Active Directory user database for authentication. Once the appliance was set up with an initial configuration we were able to access the SecureAuth SSO portal. Users can access this portal so they can set up and manage their various accounts and credentials. We found this portal to be simple and intuitive to use. As for managing the server itself, all configuration and management is done using a web-based management console. We also found this console to be intuitive to navigate, with many configurable options.
Overall, SecureAuth IdP can integrate into many areas of the existing infrastructure to provide multi-factor and single sign-on options to users. Two-factor authentication options include USB keys, smartcards, certificates and one-time passwords through SMS, phone or email, as well as password, PINs and knowledge-based question and answer authentication. From an application standpoint, this product can ingrate into both on-premise applications such as SharePoint, Outlook Web Access and VPNs from Cisco, Juniper Networks, F5 Networks and cloud-based applications such as Salesforce and Google Apps.
Documentation included an appliance setup guide and administrator guide, as well as various manuals for getting around the testing environment. While the review guides were specific to our testing scenario, we found them to be quite helpful in understanding how to use the product. As for the standard documentation, we found this to be well organised and well written. All guides included screenshots, along with step-by-step instructions and configuration examples that were easy-to-follow.
SecureAuth provides both phone and email-based technical support to customers as part of their annual subscription cost. Customers can access live phone assistance during normal business hours five-days-a-week. Mission critical after hours calls are handled by on-call support staff. Email support staff will return emails within one business day of the request. Customers can also access an online help area via the website, which includes a knowledgebase and product documentation.
At a price starting at c£1,246* per server per year plus c£9* per user per year, this product may seem a bit on the pricey side. However, we find SecureAuth IdP to be reasonable value for the money. It includes many features and functions to deploy multi-factor authentication along with single sign-on throughout the enterprise both in and out of the cloud easily.
*Converted from US dollars