Implementation Services for System i - single sign-on

From planning and configuration through identity mapping, IBM can implement a sign-on protocol that works across Microsoft® Windows® platform-based server environments to eliminate most sign-on prompts, helping to reduce administrative demands and management costs.

Highlights

• Enables users to sign on to multiple servers with a single user ID and password
• Decreases user ID and password management costs
• Reduces administrative and support demands, freeing IT staff to focus on core tasks
• Enhances user productivity
• Helps decrease security risks

Sign-on protocol may seem like a minor issue. But in the course of a single day, employees in a typical business environment must access multiple servers to perform their daily tasks. They sign on to their desktops. Mail servers. Web servers. Directory servers. Legacy servers. And each system may require a different user ID and password.

Suddenly, sign on doesn't seem so simple. IT administrators have to manage passwords and user IDs for every user, for each system. The help desk must support users when their passwords are forgotten or, in the worst case, stolen. Valuable IT funds must be devoted to this administration and support. User productivity may be diminished. Business-critical data is likely to be vulnerable from a number of entry points.

IBM Implementation Services for System i - single sign-on enables enterprises to eliminate most sign-on prompts, helping them lighten their administrative and support burden, reduce costs, boost productivity and decrease security risks. Service capabilities include:

• Planning, configuring and integrating the IBM i5/OS® operating system into a single Microsoft Windows domain
• Setting up the Microsoft Windows system to issue Kerberos distributed network authentication protocol tickets for i5/OS services
• Configuring IBM Network Authentication Service on IBM System i™ software
• Implementing enterprise identity mapping (EIM)
• Configuring workstations to participate in the single sign-on domain
• Educating users on the new sign-on solution.