1. Jason Hart Chief Executive Officer jason.hart@protocom.com
Protocom SecureLogin Product Futures & WebEspreSSO – an exciting new offering
Jason Hart
Chief Executive Officer

2. Protocom
Specializes in providing credential management and electronic proof of identity to enterprise customers worldwide.
Established in the market as the technology behind the #1 hosted single sign-on solution today with 33.9% of the market share [according to IDC July 2004].

3. SecureLogin is a holistic approach to credential management.
With SecureAccess which includes SecureLogin you are not locked into one specific password management methodology or technology. Because SecureAccess includes 5 different password management technolgies :-
Single Sign-on
Advanced Authentication
Password Synchronization
Portal Single Sign-on
Passsword Redirection
It provides an open and flexible approach to solving all major password management issues while providing the highest return on investment of any other solution.
This is why Novell is the recognised leader in Password Management.

4. Holistic Approach

5. Product Vision
One identity to access all applications, with many credentials that are transparent to the user, anywhere at any time
Integration into Identity Management solutions
More native support for advanced authentication devices in SSO
Seamless SSO via the Web
Linux clients and appliances
Improved LDAP interfaces
Integration of SSO/SLAA and SSPR to offer complete management of identity from the network login to the applications
Integration of Federated Identity solutions when they become commercially available
Usability improvements working towards a retail version
Broader application support out of the box
Allow the administrator to choose the level of application security
Improved access for third party development
Implementation of various licensing options from a lightweight standalone version to full enterprise solutions and bundles
Strong ties with partners

6. WebEspreSSO Concept

7. What is WebEspreSSO?
Provides a SINGLE and SECURE IDENTITY for an employee or consumer when accessing one or more computer systems even when those systems have different authentication security requirements and authentication challenges
e.g. a person just logs in once from a web connected computer and WebEspreSSO takes care of all future logins securely.

8. Customer Problems
Frustrated that users cannot securely access digital credentials when they want, from where they want? 
Legislative compliance issues causing administrative pain for users beyond the corporate firewall? 
Problems deploying single sign-on software to a distributed workforce.

9. Web EspreSSO Concept Diagram
One Secure Login to Web EspreSSO
ABC
PKI
Kerberos
Internet
Onetime Password
Secure Single Sign-on
Occurs for all future logins.
Passport Identity
Web Agent
Delivered
Username/Password
Liberty Identity

10. High Level Features
A web delivered single sign-on and advanced authentication technology for the C2B and E2B markets.
Allows a person to identify themselves using strong authentication such as biometrics, smartcards, tokens and/or memory challenges.
Consolidates and stores login details for multiple web sites, windows applications, emulators and so on in a single secure store either on a central x.500 directory OR locally on a users computer or smartcard.
Supports all major authentication standards and relieves the user from the complexity of multiple authentications.

11. Markets Web SSO New, unrealized market. Two aspects to technology.
Solves Distribution internally within corporation.
Provides Value Add and Improves security for C2B.
Will be driven by businesses looking for competitive edge and customer satisfaction.
Financial, Healthcare and Telecommunications business sectors are primary market.
Initial Interest is very high.
Partnerships with Axalto, G&D, Vasco and Novell will benefit.

12. Demonstration Show user experience Show administrative experience
Logging onto website
Downloading client
Accessing credentials/application definitions/policies/settings from directory
Serving up application links via web pages
Utilizing web wizard to add websites
Utilizing windows application wizard to add win32 applications
Show administrative experience
Managing application definitions
Managing against OU’s and user objects
Controlling preferences for application
Setting password policies

13. Minimum Requirements Client Server IE 6+ browser Mozilla Firefox 1+
SUSE Linux 9 + eDirectory + Tomcat Server
Windows XP or 2k+ administrative workstation
Alternate configurations AD
LDAP Compliant directories

14. Summary
Almost all information is stored electronically but protected by password which does not guarantee identity.
Electronic Transactions are becoming legally admissible.
Vastly reduce help desk costs due to password management resets.
Improve network security and meet legislative authentication requirements, absolutely and consistently.
Significantly enhance end-user satisfaction.
A user and corporation need all of this at anytime from any location – WebEspreSSO.
Massive Return on Investment
Helpdesk Staff Savings
Quality Satisfaction Gains
Increased Security with reduced load on user.
User Satisfaction
Helpdesk performance
Infrastructure simplified
External Compliance
External Audits by Bank Supervision
HIPPA
Government Regulations
Establishing appropriate evidence to Prosecute internal hackers.
Fewer Security Breaches
Internal Hacking
Redundant Staff
Improved Security Policy Compliance
Eliminate weak passwords
No Written down passwords
No Duplicate passwords across multiple internal and external systems.

15. Mozilla Firefox Support
Customer Pain
Perceived security holes in IE
Directives to move away from IE browsers
How to provide Web SSO in this climate
Solution
Mozilla Firefox support in V5 of NSL SecureLogin
Demonstration
New website login first time
Subsequent visit
Change password page

16. New Web Wizard Customer pain Solution Demonstration
Some sites difficult to integrate without extensive scripting
Capturing various events (Change Password, successful password change, incorrect passwords) difficult
End user use of tools almost impossible (need centrally configured scripts)
Solution
New extensive and easy to use wizard in Version 5 of product
Almost eliminates the need for scripting
More advanced GUI for power users
Demonstration
Web site login – first time
Web site login – subsequent time
Password change event
Incorrect password entered

17. iManager Support Customer Pain Solution Demonstration
Still having to use ConsoleOne for SecureLogin Management
Ease of use to learn interface
Solution
i-manager integration of SecureLogin’s administrative interface in Version 5 of product
Easy to learn “Web look and Feel”
Simple to setup and configure
Demonstration

18. PDA Version of Product Customer Pain Solution Demonstration
How do users take home credentials (that they might not even know) for applications that the business want them to utilize from home or on the road.
How to single out these credentials from other applications.
How to integrate this with PDA’s and Smartphones.
How to utilize OTP without purchasing expensive devices.
Solution
PDA/Smartphone component available now.
Runs on Pocket PC 2003 and others.
Easy to administer credentials centrally.
Password Safe.
Small footprint.
OTP integration.
Demonstration
Administrator sets credentials for use on PDA/Smartphone.
User accesses credentials from PDA/Smartphone.
User utilizes OTP generated credentials to access backend service.