Delivers simple, quick and cost effective ‘two factor’ authentication without having to carry a new device. It is ideal for anyone who needs occasional secure access to your SSL VPN, Extranet or Web Portal. During the login process the user clicks a link to request a secure one-time passcode (OTP). Signify validates the user’s PIN, generates a unique OTP and sends it to their registered mobile phone, PDA or email box by SMS or email.

The user logs in with this OTP, proving they both know their PIN and have access to their registered device.

Passcode OnDemand is perfect for:

• Office staff checking web email from home
• Contractors and part-time staff
• Clients and partners accessing an Extranet
• On-line banking, betting and retailing consumers

Flexible service options

To suit different user needs and security policies:

• In ‘PreSend’ mode, a new OTP is automatically sent when the previous passcode has been used or expired, so your user always has a valid OTP to hand, even if out of service coverage.
• Users can choose to have several OTPs sent in one message, and can select where they want them sent.
• You can define the strength of Security Policy that is enforced on your users.

A Complete Managed Service

Signify’s complete service makes it quick, simple and affordable to provide secure authentication whatever the size of your user community. At the heart of the Signify service is the Identity Management Centre (IMC) which provides policy-based management of the entire user lifecycle.

Key features of the IMC are:

• Security policy: the IMC enforces compliance with the policy defined by your Security Officer
• Role-based management: the IMC defines clear roles and duties for each administrator
• Devolved administration: routine tasks can be handled by a local administrator who can only ‘see’ those users and systems that are within their scope of authority
• End user self-service: via their personal ‘My IMC’ interface and automated Helpdesk
• Organisational modeling: the IMC models the complex relationships between all your in-house, client and supplier organisations
• Temporary User Access Control: contractors and other 3rd parties can have identities which allow access only for a defined period of time
• Own-label branding: the IMC, tokens and all other aspects of the Signify service can be customised with your branding

Signify Service Options

Choose the best way to roll out credentials to your users and to provide them with access to Signify’s 24x7 Helpdesk service.

Credential Provisioning

You can handle token delivery inhouse or let Signify do it for you:

• Local provisioning: administrators at each of your offices manage a pool of tokens and follow the IMC’s simple procedures to allocate them to their local users, or
• Signify provisioning: your administrators request new users via the IMC and Signify delivers their tokens by post or courier: ideal for your extranet users.

Self-Service Helpdesk

Signify’s fully automated helpdesk lets your users self-solve all their common problems such as lost or stolen token, forgotten PIN and undelivered OTPs.The Signify Helpdesk can be accessed 24x7 by your users via:

• Web: self-service over the web is part of the standard Signify service, and/or
• Telephone: the fully automated interactive telephone helpdesk is available as a service option, and/or
• Your support team: who can use Helpdesk Operator scripts to step the user to a solution.

Your security policy is enforced at every step, ensuring that the user is properly identified before support requests are actioned.