Preliminary Assessment and Analysis
- Discover and document current state
- Identify key problems and challenges
- Develop business case for IdM project

IdM Strategy Definition
- Define prioritized project goals
- Develop IdM project implementation roadmap

IdM Scoping and Planning
- Develop realistic project scoping
- Analyze and define project requirements (RFP, RFI…)
- Conduct vendor evaluations and product selections
- Support contract definition and pricing negotiation
- Perform risk analysis

IdM Project Management, Architecture and Design
- Assemble project team
- Provide full Project Management services
- Gather project requirements
- Develop IdM Architecture and Design
- Produce Implementation Project Plan

IdM Project Implementation and Integration
- Discovery, Planning and Prototype
- Installation and Configuration
- Test, Pilot and Deployment
- Training and Transition

Lifecycle Support Services
- IdM Maintenance Services
- Periodic assessments
- Technology refresh

IdMlogic is expert at providing cost-effective strong authentication solutions. With the many business benefits associated with enabling HR portals, we have been busy helping our clients implement these solutions in time for open enrollment. We have extensive experience with implementing these solutions quickly and smoothly, using our proven best practices and methodologies.

Here are the success story highlights:

• The client is a Fortune 500 company with over 40,000 employees
• The HR portal is PeopleSoft version 8
• The authentication solution covers intranet and Internet access from dedicated or shared computers
• The implementation time for the end-to-end project was 6 weeks
• The total cost, including implementation, was under $8 per user

The client is extremely satisfied with this cost-effective solution and quick implementation, and has received employee feedback about their great user experience, resulting in a very high adoption rate.

The client is now planning to leverage the authentication platform to retire 6,000 hard OTP tokens used for remote VPN access. Replacing the tokens with new OTP credentials will save the client almost $50 per year per user. The savings realized from the token replacement paid for the HR portal strong authentication project!

Understanding your business goals, as well as your security and regulatory requirements, is the first step in delivering a strong authentication solution that meets your immediate needs and provides a foundation for addressing future requirements.

At IdMlogic we don’t just install strong authentication, we build a strategic platform to address all your strong authentication needs. Our SOA² - Service Oriented Authentication Architecture is a powerful platform-based solution that enables business, protects digital assets and lowers overall cost to own and operate strong authentication solutions.

We review with you all the user scenarios and use cases and help you select the most appropriate credentials to meet the level of risk mitigation and security the system requires. We understand user adoption issues, user tendencies and distribution support issues, and we design the system with your specific business environment, use cases and workflows in mind.

And with our fully automated processes around user and credential administration, like self-registration, self-service credential recovery and renewal, the solution is easy to maintain and actually helps lower calls to your already overburdened helpdesk.

An Out-of-band authentication system is another layer of protection that institutions can use to protect user accounts from online fraud. Out-of-band uses a communication path different from the path used to access the application or data - the phone network. And the phone serves as another authentication factor: something you have.

But not all Out-of-band methods are out of band.

There are systems that deliver an OTP to the user’s phone as text by SMS, or by text-to-speech. The user then enters the OTP credential as the challenge response to access the application. Other systems deliver the OTP to the user’s email address. These systems use out-of-band for credential delivery to the user; the authentication (challenge response) is not out of band.

Out-of-band systems that use a separate communication channel for authentication challenge the user with a phone call. The user enters either a static PIN or an OTP on the phone and sends it on the phone network. The OTP can be displayed on the user’s screen, or can be a software OTP generated on the phone.

IdMlogic’s Service Oriented Authentication Architecture - SOA² supports a wide variety of Out-of-band authentication methods.

Financial institutions concerned about protecting their clients, improving online security and meeting the November 1, 2008 deadline for compliance with the 31 Red Flags outlined by the FTC, are architecting solutions that incorporate strong authentication solutions driven by risk and fraud analytics for added protection.

Identity theft prevention programs include policies and procedures for detecting, preventing and mitigating identity theft. This includes identification and detection of patterns, practices and activities that are ‘red flags’ signaling possible identity theft, and development of appropriate responses.

Detect, Alert and Respond.

IdMlogic’s Service Oriented Authentication Architecture - SOA² supports real-time fraud analytics and scoring Services based on device and location fingerprints, workflow and behavior patterns, and sophisticated customizable fraud rule models, that detect and score fraud activity, generating a risk score. Other Services generate real-time alerts and reports.

SOA² Services respond by triggering dynamic, rule-driven actions based on risk, with online challenges and rule-based stepped up authentication, like out-of-band OTP, for example.

Please contact us for more information.

Recent dramatic increases in identity-theft-related fraud, coupled with growth in volume of online banking transactions, credit card, brokerage, insurance and other eBusiness, is driving the need for stronger authentication of the consumer and of the eBusiness website itself. Solutions are needed to protect consumer identities, gain consumer confidence and support the growth of online business adoption, and to respond to regulatory requirements, like PCI-DSS and FFIEC.

IdMlogic’s Service Oriented Authentication Architecture - SOA², together with our ‘layered’ authentication approach based on transaction risk, enable us to rapidly deploy scalable and flexible strong authentication solutions for your eBusiness. And SOA² self-registration, self-service and credential recovery and renewal Services can actually lower operations costs while improving security and addressing regulatory requirements.

We can help you select low-cost, easy-to-use authentication factors and credentials for your customer portals, tailored to your specific requirements, including your eBusiness application, types of site visitors and their roles, as well as transaction types. These include machine authentication, knowledge-based authentication, IP-geo-location, out-of-band OTP, mutual authentication and more.

And for high-value or high-risk transactions, grid cards, OTP tokens (hardware and software based) and portable digital certificates are available.

Validate Real Consumer Identity

IdMlogic offers a strong user registration solution for account opening that verifies an applicant’s identity by asking a series of financially based and ‘out of wallet’ questions only the “real and true” person would know, based upon years of public data and unique inquiry methodology. This validates the identity of the user before provisioning a user’s credentials. And with the most common type of identity fraud related to bogus account openings, identifying a new user is very important.

Leveraging our SOA² platform, IdMLogic can quickly help address these common requirements for strong authentication. And with a wide range of authentication methods to choose from, we can help you save as much as 80% of the cost of standard hardware OTP Tokens. This is in addition to the operational savings resulting from a full self-service recovery and replacement.

Working with best-is-class open authentication platforms, IdMlogic delivers key strong authentication solutions for your employees, contractors and partners.

VPN logon access
Strong authentication for remote VPN access for most VPNs, including:

Website logon access
Strong authentication for Extranet and Intranet portal access for:

And we can integrate strong authentication with virtually any Web application.

Network logon access
Strong authentication for your network logon.

Traditionally, OTP technology is implemented in physical hardware tokens, like the well-known RSA SecurID tokens. Such hard tokens can be expensive to acquire and even more expensive to maintain. And the support and administrative burdens associated with granting access to users that have a lost or inoperable device is problematic and expensive.

There are now lower cost OTP alternatives to expensive hard tokens. IdMLogic’s SOA² (Service Oriented Authentication Architecture) suports industry standard OATH tokens typically costing as little as $5 for hard tokens with a 7 year lifespan. In addition, support for alternative OTP solutions like software based OTP that runs on mobile devices and as desktop gadgets, generic USB key device support for portable credentials, and Grid and eGrid technology, provide the added benefit of facilitating electronic distribution of credentials.

The lower acquisition cost, combined with complete user self service enrollment and recovery, can lower the overall cost of ownership by as much as 80% of current hard token solutions. And by combining multiple authentication methods on a single platform, you are free to choose the right credential for any particular user or group of users.

IdMlogic’s Service Oriented Authentication Architecture - SOA² can even lower or completely eliminate helpdesk calls related to forgotten or expired passwords, providing even greater operational benefits and savings.

There are three categories of authentication methods and a variety of credentials available for each method:

• - Something you know (username/password, PIN, knowledge/shared secret)
• - Something you have (machine, phone, card, token, certificate)
• - something you are (fingerprint, voiceprint, iris scan)

The better known credentials are shown here.

These various credentials vary widely in cost, ease of use, and ease of administration. Because of these considerations, some credentials, like biometrics and hard OTP tokens, are often eliminated for wide deployments. Credential selection should be based on a balanced assessment of the application or asset being protected and the user profile, including: user sophistication, distribution, overall quantity, and the ability to directly reach, touch and support those users.

IdMlogic’s Service Oriented Authentication Architecture - SOA² supports a wide range of authentication credentials. And by combining methods as “layers,” we are able to dynamically vary access controls and us alternative methods to address those “what if” scenarios that can otherwise impact user satisfaction.

IdMlogic Partners with Schlumberger in Support of Federated Identity for the Oil & Gas Sector

PARKLAND, FLORIDA, September 19, 2005 – A Federated Identity Management Proof of Concept (POC) for the Oil & Gas Industry was conducted by Chevron, Schlumberger and other POC participants. Federated identity is a standards-based means of sharing an identity and entitlements across different domains – as between joint venture partners and their contractors. IdMlogic supported Schlumberger as solution architect in these proof of concept tests.

“The tests were performed over 30 servers and heterogeneous federation technologies, including the PingIdentity PingFederate for simplified, standards-based federation,” said IdMlogic CEO, Michael Trubatch. The tests demonstrated that seismic interpretation could be performed across the firewall.

The Proof of Concept included SiteMinder and Sun Microsystems federation technologies, as well as PingFederate.

###

About IdMlogic

IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

IdMlogic Partners with Entrust for Strong Authentication

PARKLAND, FLORIDA, March 27, 2006 – IdMlogic, an independent, privately held firm focused on Identity and Access Management, today announced that it has penned a Trusted Partner Agreement with Entrust, a leading security products company. Entrust secures digital identities and information for consumers, enterprises and governments in 1,650 organizations spanning 60 countries worldwide.

According to IdMlogic President, Iris Sharoni, “We were very much impressed with the openness of the Entrust IdentityGuard authentication platform. This makes for relatively easy integration into enterprise security architectures. And with IdentityGuard, we can offer a number of different authentication methods and factors, depending on our client requirements. We are especially interested in the patented Entrust grid card strong credential.”

IdMlogic plans to add value to the off-the-shelf IdentityGuard offering through administrator and end user GUIs that automate the processes around credential administration. These include self-registration and self-service portals.

###

About IdMlogic

IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

IdMlogic Integrates the Entrust IdentityGuard Strong Authentication Platform with the CA SiteMinder

PARKLAND, FLORIDA, July 24, 2006 – IdMlogic, an independent, privately held provider of Identity & Access Management solutions, completed its integration of the Entrust IdentityGuard second factor authentication platform with the market leading CA SiteMinder web access manager.

“We are delivering on our partnership with Entrust,” said IdMlogic President, Iris Sharoni. “We now have a single integration point for the IdentityGuard multi-factor authentication for all applications protected by SiteMinder.”

“Integration is the key,” according to Dekel Liberman, IdMlogic chief authentication architect. “ Instead of integrating to each web application, enterprises that have a web single sign-on front end, like SiteMinder, can easily and cost-effectively integrate a multi factor authentication solution.”

###

About IdMlogic

IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

IdMlogic Integrates the Entrust IdentityGuard Strong Authentication Platform with the IBM Tivoli Access Manager

PARKLAND, FLORIDA, October 18, 2006 – IdMlogic, an independent, privately held provider of Identity & Access Management solutions, integrates the Entrust IdentityGuard multi-factor authentication platform with a second web access manager, the IBM Tivoli Access Manager.

“This is our second integration of IdentityGuard with a web single sign-on product,” said IdMlogic Principal, Andrew Jazwinski. “Our first integration was with the CA SiteMinder. We are seeing more and more demand in the market for strong authentication, as enterprises respond to real security concerns and regulatory requirement, like FFIEC.”

###

About IdMlogic

IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

IdMlogic Implements Second Factor Consumer Authentication in a Record 30 Days for a Large Financial Client

PARKLAND, FLORIDA, December 12, 2006 – IdMlogic, an independent, privately held provider of Identity & Access Management solutions, implements second factor authentication based on the Entrust IdentityGuard multi-factor authentication platform for a large federal credit union responding to FFIEC regulatory requirements.

“The client required that the solution be implemented quickly, and I am pleased to report that we were able to complete the project, from beginning to end, in thirty days and within budget,” said IdMlogic President, Iris Sharoni. “This was possible because over the course of a number of engagements we have developed a detailed methodology for deployment of second factor authentication.”

###

About IdMlogic

IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

IdMlogic Relieves Administrative Burdens of Strong Authentication

Entrust’s Strong Grid Credential Gets Electronic Self-Registration and Self-Service

PARKLAND, FLORIDA, March 12, 2007 – Security and compliance requirements often demand that organizations deploy stronger, second factor Authentication for employee, partner or consumer access. But deployment of stronger authentication often carries burdensome acquisition, integration and on-going user and credentials administration costs. In partnership with Entrust, IdMlogic now delivers a strong second factor Authentication solution which eases the cost burdens associated with deployment of stronger Authentication in enterprises of all sizes.

“We’ve transformed the Entrust IdentityGuard patented strong physical grid credential to an image that may be sent via email or by other means such as SMS or MMS to a cell phone. Once in electronic form, we are able to automate grid deployment and administration processes. We call this eGRID,” said IdMlogic President, Iris Sharoni. “We are partnering with Entrust to deliver this technology to organizations for authenticating consumers in high-value transactions as well as for the enterprise.”

The IdMlogic eGRID solution can accommodate custom processes around user credential administration. “We typically walk our clients through various user scenarios or use cases and implement their specific business processes,” said IdMlogic chief authentication architect, Dekel Liberman. “Of course self-registration and self-service have big payoffs in user adoption and reduction in help desk calls.”

###

About IdMlogic

IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

IdMlogic Provides Strong Authentication for 750,000 Customers of a Large Insurance Company

PARKLAND, FLORIDA, June 28, 2007 – IdMlogic, an independent, privately held provider of Identity & Access Management solutions, implements a complete authentication solution for a large insurance company launching a new web portal for existing customers and prospects.

“The client was developing a web portal for existing policy holders to manage their insurance policies and to provide product information to prospects looking for coverage,” said IdMlogic Principal, Andrew Jazwinski. “He needed a flexible, first and second factor authentication solution that provides different authentication strength depending on the user role and the information being accessed.”

“We leveraged the Entrust IdentityGuard versatile authentication platform as well as custom development to satisfy these client requirements,” said IdMlogic President, Iris Sharoni. “Our solution provides very high availability across multiple sites. IdentityGuard easily scales to meet these client requirements.”

###

About IdMlogic

IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

IdMlogic Engaged to Provide Strong Authentication for a Large Telecommunications Company

PARKLAND, FLORIDA, July 30, 2007 – IdMlogic, an independent, privately held provider of Security and Identity & Access Management solutions, implements a Strong Authentication solution for one of the nation’s largest telecommunications companies. The solution features the Entrust IdentityGuard patented strong grid credential, and automates the business processes around credential administration.

“We leveraged the Entrust IdentityGuard versatile authentication platform and their grid credential,” said IdMlogic President, Iris Sharoni. “We deliver and administer the grid in electronic form. We call it eGRID. This allows us to automate self-registration and self-service. It makes for a very friendly user experience, and of course minimizes administration and help desk costs.”

###

About IdMlogic

IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

IdMlogic Signs a Strategic Partnering Agreement with Leading Identity Theft Prevention Provider StrikeForce Technologies

PARKLAND, FLORIDA, December 11, 2007 – IdMlogic, an independent, privately held full service provider of Security and Identity & Access Management solutions, today announced its partnership with StrikeForce Technologies. StrikeForce is a leader in solutions that help prevent registration fraud, identity theft and data theft.

An important area of specialization for IdMlogic is delivery of strong authentication solutions for the B2C, B2E and B2B markets. IdMlogic is very excited to be able to work with the StrikeForce broad ProtectID platform with the various One Time Password and Out-of-Band authentication methods in this important security market segment.

“Our partnership with StrikeForce broadens our ability to deliver identification and strong authentication solutions to our client,” according to Iris Sharoni, IdMlogic President. “We are now able to offer a wider set of authentication methods as we operationalize and automate the processes around credentials management and the user experience.”

“StrikeForce is very positive about our partnership with IdMlogic. They truly are visionaries when it comes to delivering Identity Management solutions,” says Mark L. Kay, CEO of StrikeForce.

###

About IdMlogic
IdMlogic is a full-service provider of Security and Identity & Access Management (IAM) solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

About StrikeForce Technologies
StrikeForce Technologies, a leader in solutions that helps prevent identity theft, is a company that can protect consumers, customers, partners and employees—in real time against identity fraud. Its total protection solution strengthens companies’ defenses against the biggest points of fraud—when the Internet is accessed, when accounts are opened, when they’re accessed, when they’re changed, and each time there’s a new transaction. StrikeForce Technologies is trading on the OTC bulletin board (SKFT) and the company is headquartered in Edison, N.J., and can be reached at www.strikeforcetech.com or (866) 787-4542.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

Press Release

IdMlogic Launches a Service Oriented Authentication Architecture (SOA2)

PARKLAND, FLORIDA, July 14, 2008 - IdMlogic, an independent firm focused on Identity & Access Management and selected Security solutions, today announced a Service Oriented Authentication Architecture (SOA²) - a foundation enabling rapid deployment of scalable and flexible strong authentication solutions. Providing a secure, open platform supporting a wide range of authentication methods and credentials, SOA² makes securing and protecting digital assets and identities quick and cost effective.

“SOA² Services enables us to rapidly operationalize and automate processes around user and credential administration, like self-registration, self-service and credential recovery,” said IdMlogic president, Iris Sharoni. “With SOA², our strong authentication projects are very quick and smooth, with substantial savings to our clients, not just in implementation costs, but also in on-going lifecycle administration costs.”

IdMlogic applies its Service Oriented Authentication Architecture to a variety of client requirements, including securing HR, partner and customer portals; detecting, preventing and mitigating identity theft in online financial transactions; securing enterprise and VPN access; and generally enabling eBusiness with easier, more secure access.

According to IdMlogic principal, Andy Jazwinski, “Our SOA² solutions can dramatically lower the cost of OTP hard tokens. And SOA² delivers strategic solutions that scale and extend to satisfy future client needs.”

###

About IdMlogic

IdMlogic is a full-service provider of Identity & Access Management (IAM) and selected Security solutions that secure and manage digital identities and assets. Leveraging key technology partnerships, we deliver end-to-end IAM solutions, data encryption, encryption management and PKI. IdMlogic is independent and privately held, with headquarters in Parkland, Florida, a development center in Tel Aviv and sales offices in the Northeast and Mid-Atlantic. For more information, call 917-843-7741, email info@idmlogic.com, or visit IdMlogic at www.idmlogic.com.

IdMlogic is a trademark of IdMlogic, Inc. All other company and product names are trademarks or registered trademarks of their respective owners.

Enterprises are challenged now more than ever to enable business by taking business processes online, to protect confidential and personal identifiable information (PII), to protect against identity-theft-related fraud, and to comply with regulations like SOX, HIPAA, FFIEC and PCI. These challenges call for strong data access controls, and strong access controls begin wih strong user authentication.

IdMlogic believes that Strong Authentication solutions should:

• Include a high-availability, scalable and extendable multi-factor authentication platform that is easy to integrate and that makes access easier as well as more secure
• Balance security and ease-of-use - with the right credentials
• Benefit, not burden operations through process automation
• Lower support costs and decrease helpdesk calls
• Deliver benefits quickly and support future requirements

IdMlogic’s SOA² is the foundation enabling us to rapidly deploy such scalable and flexible strong authentication solutions. Providing a secure, open platform supporting a wide range of authentication credentials, SOA² makes securing and protecting digital assets and identities quick and cost effective. With full self-registration, self-service and credential recovery and renewal, SOA² can actually lower operations costs while improving security and addressing regulatory requirements.

With a wide range of authentication methods to choose from, matching the right credentials to your specific user profiles is easy. Selecting non-invasive, low-cost and easy-to-use credentials for your customer portals, with full mobility for access anytime from any device, is critical to enabling your business online. Providing low cost alternatives to expensive token solutions, with full self-service recovery, can save you as much as 80% of your current cost and improve service levels for your endusers while decreasing helpdesk calls related to lost or damaged tokens. SOA² can even lower or completely eliminate helpdesk calls related to forgotten or expired passwords, providing even greater operational benefits and savings.

Whether you are planning an Identity Management initiative, have completed ‘phase one,’ or need to make a midcourse correction, it is often important to “begin at the beginning,” even if you need to take a step back.

And that is to align or re-align your Identity Management program with your business needs, goals and objectives, be they compliance, data protection, improved productivity, or simply good security.

An initial strategy and planning phase “at the beginning” is often critical to success. While your Identity Management business process is ultimately enabled through a number of technologies, technologies are not the place to start. Technology solutions, like single sign-on and user provisioning, should be implemented in a phased program plan that meets your specific business objectives.

On the other hand, if you have an urgent ‘point’ requirement, like protecting access to an employee Web portal for example, then a strong authentication ‘point’ solution may need to be implemented quickly. But this should be a open, scalable and extendable platform that is capable of supporting not only current but also future requirements, and that seamlessly integrates into your security infrastructure.

IdMlogic brings to Identity Management projects deep insights into Identity & Access Management technologies and architectures, including role engineering and entitlement management, access management and single sign-on, strong authentication, converged (logical and physical) access, and user provisioning.

We use a proven methodology with a phased implementation of solution elements to maximize project success and minimize risk.

And a phased deployment, fast and efficient, driven by your specific business goals, and guided by an understanding of your requirements.

• Phase 1 - Project Initiation and Planning
• Phase 2 - Requirements Analysis and Design
• Phase 3 - Development and Testing
• Phase 4 - Installation, Integration and Testing
• Phase 5 - Deployment
• Phase 6 - Operations and Maintenance

IdMlogic services cover the entire Identity Management project lifecycle and are tailored to the specific requirements of our clients.

Seeing tremendous productivity gains from taking their business processes online, employers want to automate their HR processes to realize similar efficiencies, save money and allow HR staff to focus on more strategic initiatives.

But to go much beyond merely educating employees about company policies, internal procedures or benefit and investment options and the like, to provide employee and manager self service of Human Resources data, employers must secure and protect the privacy of employee information is accordance with Sarbanes-Oxley, HIPAA and other regulatory requirements. With such security in place, employers can improve HR efficiency in maintaining employee demographic data, benefits information, and even electronic paystubs.

To provide such security and regulatory compliance, an HR Portal needs to be protected with strong, second factor authentication. The challenge is to provide such security together with accessibility and ease-of-use. Employees and managers should be able to access the Secure HR Portal anytime, from anywhere – from inside and outside the corporate firewall, from a company computer and a personal computer at home, from a company kiosk, a library, an Internet cafe, or some other shared computer.

IdMlogic secures HR Portals with such strong, second factor authentication solutions for the Fortune 1000 as well medium size companies. We take care to align the solution with your business goals, carefully review your requirements, walk you through various user scenarios to assure ease-of-use and that your requirements are met, architect, design and implement the solution – all in a month to two months timeframe. And we can automate the processes around user and credential administration for you, with self-registration, self-service and credential recovery. Fast. Cost effective. Secure.

Contact us to learn more.

A single, streamlined credential with strong two- or three-factor authentication for unified badging into facilities and access to networks, systems and applications – that’s the clear benefit of a converged access management solution.

Movement towards converged access is being driven by the Homeland Security Presidential Directive 12 (HSPD12). And as is often the case, such Federal mandates tend to drive the private sector as well.

But implementing converged access is not without its challenges. Converged access requires a unified infrastructure with interoperable standards and components, including policies, procedures and provisioning systems to handle not only initial credential distribution, but also forgotten badges / credentials, temporary credentials, temporary users, and so on. And there is often the cost of upgrading physical access control standards and environments.

On the other hand, converged access can deliver a unified, integrated access management solution that protects all your business assets, with centralized control and reporting, faster response to security emergencies, and improved regulatory compliance.

Because the ‘right’ solution for an enterprise depends on its environment, as well as on its goals and objectives, IdMlogic evaluates and recommends alternative technologies, such as:

• PKI smart card logon – a hybrid smartcard that contains both a contact-less chip used for physical access, and a contact chip for smartcard logon digital certificate.
• RFID logon – utilizing a contact-less card with the functionality of a logical authentication device.
• Biometric authentication – a portable fingerprint reader and wireless receivers for both physical and network access.

Our staff of solution architects and systems engineers can help you select and implement a converged access control solution that is right for your organization.

RFID Logon Solution Example

An RFID logon solution is based on an employee presenting his RFID (contact-less) badge to a USB external reader. The badge is an HID product using the ICLASS ™ protocol for encryption of all data transferred from and to the badge.

The reader induces an electromagnetic field near the card, and a hidden card antenna and electric mechanism transform the energy to current flow in the card. The card identifies to the reader, and the data (Card ID) is send to a card management server for authentication.

When authentication succeeds, the saved user domain password is sent back to the client and becomes the login credential to the directory.

Large user provisioning projects are complex initiatives involving many stakeholders and subject matter experts, and require experienced management and strong corporate support. But while adoption of user management and provisioning technologies has been strong in recent years, large projects often languish after ‘phase one’ integration to three or four target systems.

IdMlogic understands the complexities and technical and business challenges in delivering a successful user provisioning project, from preliminary assessment and requirements analysis, to development of a prioritized, phased implementation plan, to realistic project scoping, architecture and design, project management, and finally to solution implementation and integration. And our staff of project managers, solution architects, system engineers and developers is experienced in best-of-breed user provisioning technologies.

User management and provisioning is at the core of an integrated Identity and Access Management solution.

Only 73% of audited privileges are typically policy compliant!

Many enterprises today are migrating to Role-based Identity and Access Management (IAM) to improve security by enforcing the enterprise Security policy, to improve their ability to comply with permission-related regulations (like SOX), to simplify access, entitlement and user management, to improve their user provisioning processes, to reduce administrative costs, and to improve service to employees, customers and partners.

Full value and benefits of Roles can be realized in a managed Roles ‘Environment.’ Such a Role Management Environment should support and automate:

• Role definition around the organizational structure, job functions and business processes
• Periodic Role-based audit and cleansing of privileges across all target systems (platforms, databases, directories and applications)
• Deployment of Role definitions to Identity and Access Management systems
• Ongoing management and restructuring of Role definitions to adapt to business changes
• Audit, enforcement and reporting of compliance with Security policy and regulations
• Interaction of stakeholders (Lines of Business, Risk, Security, Compliance, Audit, …) in Role management processes

IdMlogic staff of project managers, solution architects and system engineers has on-the-job project experience in roles engineering and entitlement management, and in implementing managed roles environments.

IdMlogic approach to role engineering and management projects encompasses the following phases:

• Strategy and Planning
• Audit and Cleansing
• Role analysis (bottom-up and top-down)
• Role lifecycle management – ongoing

Corporate Offices:
IdMlogic Inc.
6362 N.W. 80th Terrace
Parkland, Florida 33067

Development Center:
IdMlogic Ltd.
Development Center
6 Raul Wallenberg St.
Tel Aviv, Israel

US Sales Offices:
Northeast
IdMLogic Inc.
119 Rockland Center, 194
Nanuet, New York 10954

Mid-Atlantic
IdMLogic Inc.
11811 Cedarwood Drive
Dunkirk, Maryland 20754

Or, fill in your details and we will contact you: