1. Automating Mainframe Authentication Using SecureLogin
Keith Lewis
Novell Consultant
Novell, Inc.
Tony Merritt

2. The Password Crisis: Typical User
Novell BrainShare 2002
The Password Crisis: Typical User
Tony, the typical end user, has run out of Sticky Notes for the entire company. He logs in to the mainframe to issue an order to purchasing. However, which password does he use for the purchasing system? Is it different from the one he uses for data entry?? If he can not complete his mission, NO ONE will be prepared for the upcoming, mandatory password change!
Will he make it??
TUT243—Automating Mainframe Authentication Using SecureLogin

3. The User’s Password Crisis Defined
Growing number of passwords
Stringent security requirements
Support for legacy (mainframe) applications
End users are not always at the office desktop, so access to sticky notes may be limited
Multiple regions for mainframe authentication may require different sets of credentials

4. Management’s Password Crisis Defined
Growing number of applications/sessions/LPaRs/ etc. to support
Need to support newer technologies such as biometrics on mainframes
Difficult to introduce or enforce username and password policies
Help Desk must be able to manage solution
Corporate cost of sticky notes

5. Password Crisis Studies
Novell BrainShare 2002
Password Crisis Studies
Helpdesk reset costs (hard costs)
Gartner—$300-$340 per user per year
Large customer $35 per reset
Password reset account for 25-40% of helpdesk calls
70-80% of these calls are forgotten passwords
Productivity increases (soft costs)
25-45 hours a year logging on per user
14-22 hours with Single Sign-On
TUT243—Automating Mainframe Authentication Using SecureLogin

6. The Password Crisis—Smart User
Keith, the smart user, does not need sticky notes. He gracefully enters one password for all systems he needs to work with. He is able to choose the purchasing application from his menu and have it automatically logon to the correct mainframe session with the correct password. He also enters into the human resources system to check on his bonus with one login.
How did he do that??

7. SecureLogin User Features
Provides a single password experience for the user
Provides biometrics support and graded authentication for additional security and ease of use
Stores encrypted passwords in Novell eDirectory™, allowing the end user roaming access to Single Sign-On capability
Provides support for mainframe, web and windows applications
Provides support for telnet based authentication
Provides support for multiple region access
Reads messages from the screen and allows custom responses based on these messages

8. SecureLogin Management Features
Uses the Secret Store technology to secure credentials
Provides a robust scripting language to simplify user experience and requires minimal training
Uses ConsoleOne® and eDirectory to ease the distribution and management of scripts into the corporate environment
Eases the introduction of new or the enforcing of existing password policies
Provides a common solution for different access methods including desktop with thick client, thin clients, web-based, kiosk based, etc.
Helps provide a consistent user interface for password changes, warnings, errors, corporate messages, etc.

9. Supported Emulator Types
HLLAPI
VBA
DDE
Some Non-Standard emulators

10. Supported Popular Emulators
Reflection
Attachmate Extra
IBM Personal Communications
Rumba
SecureLogin supports 150+ emulators

11. Steps to Single Sign-On Enable Reflection
Identify where credentials are entered or changed
Identify what error or informational messages occur and what must be done when they occur
Determine if SecureLogin will implement username or password policies
Determine if SecureLogin solution will require Novell Modular Authentication Services™ (NMAS™), statistics or logging

12. Vision…one Net Mission
A world where networks of all types—corporate and public, intranets, extranets, and the Internet—work together as one Net and securely connect employees, customers, suppliers, and partners across organizational boundaries
Mission
To solve complex business and technical challenges with Net business solutions that enable people, processes, and systems to work together and our customers to profit from the opportunities of a networked world

14. wiN big Access and Security table one Net solutions lab visit the
in the
to obtain an entry form