Securing the Net: Web Authentication Using SecureLogin Novell BrainShare 2002 Securing the Net: Web Authentication Using SecureLogin Keith Lewis Consultant Novell, Inc. kalewis@novell.com Tony Merritt Engagement Partner tmerritt@novell.com TUT244—Securing the Net: Web Authentication Using SecureLogin

The Password Crisis: Typical User Tony, the typical end user, has run out of sticky notes He must fly to 3M headquarters in Northridge, CA He must rent a car and a hotel while his order is processed He must ship the order back by FedEx If he cannot complete his mission, no one will be prepared for the upcoming, mandatory password change Will he make it??

The User’s Password Crisis Defined Growing number of passwords Stringent security requirements Complex Internet applications using Java, Frames, and CGI Scripting End users are not always at the office desktop, so access to sticky notes may be limited Proliferation of shared desktops—browser-remembered passwords will not work

Management’s Password Crisis Defined Growing number of applications to support Corporate standards require customization of solution Difficult to introduce or enforce username and password policies Help desk must be able to manage solution Corporate cost of sticky notes

Password Crisis Studies Novell BrainShare 2002 Password Crisis Studies Help desk reset costs (hard costs) Gartner—$300-340 per user per year Large customer—$35 per reset Password reset account for 25-40% of help desk calls 70-80% of these calls are forgotten passwords Productivity increases (soft costs) 25-45 hours a year logging on per user 14-22 hours with Single Sign-On TUT244—Securing the Net: Web Authentication Using SecureLogin

The Password Crisis: Smart User Keith, the smart user, does not need sticky notes He gracefully enters one password for all systems he needs to work with He books travel to Florida for a vacation with the bonus he received from saving the company money on sticky notes He is able to book a car, hotel, airfare, and verify that he has enough time off with one login How did he do that??

SecureLogin User Features Provides a single password experience for the user Provides biometrics support and graded authentication for additional security and ease of use Helps provide a consistent user interface for password changes, warnings, errors, corporate messages, etc. Provides support for Internet applications using Java, Frames, and CGI Scripting Stores encrypted passwords in Novell eDirectory™, allowing the end user roaming access to Single Sign-on capability Since passwords are in eDirectory, NOT in the browser, a typical desktop upgrade will NOT put the user out of work for several days

SecureLogin Management Features Uses the Novell SecretStore® technology to secure credentials Provides a robust scripting language to simplify user experience and requires minimal training Uses Novell ConsoleOne® and eDirectory to ease the distribution and management of scripts into the corporate environment Eases the introduction of new or the enforcing of existing password policies Provides a common solution for different access methods including desktop with thick client, thin clients, web-based, kiosk-based, etc.

Enabling a Web Application: Profiling Initial authentication when no credentials exist Authentication once credentials have been set Authentication with incorrect password Changing the password

Enabling a Web Application: Flow Identify the URL that presents Internet page with the login dialog boxes Determine functionality built into the Internet page Determine if a username or password policy is needed Identify the URL or text that indicates a successful login as well as a failed one Determine if solution will require Novell Modular Authentication Services (NMAS™), statistics, or logging

Enabling a Web Application: Configuring There are three different mechanisms for configuring applications Invoking the wizard on SecureLogin console Auto-capture on login by wizard Manually adding the application and script

SecureLogin Application Wizard

SecureLogin Application Wizard (cont.)

SecureLogin Auto Capture Wizard

SecureLogin Auto Capture Wizard (cont.)

Manually Adding the Application and Script

Sample SecureLogin Script Dialog Title "Enter Network Password" Ctrl "#1218" Ctrl "#1219" ctrl #1041 EndDialog Setplat "novell" readtext #1041 ?website if ?website eq "mail.myrealbox.com" displayvariables else endscript endif Type "$Username"#1218 Type "$Password"#1219 Click #1

Vision…one Net Mission A world where networks of all types—corporate and public, intranets, extranets, and the Internet—work together as one Net and securely connect employees, customers, suppliers, and partners across organizational boundaries Mission To solve complex business and technical challenges with Net business solutions that enable people, processes, and systems to work together and our customers to profit from the opportunities of a networked world

wiN big Access and Security table one Net solutions lab visit the in the to obtain an entry form