EmpowerID

Password Manager

User self-service for password resets and account unlocks
Password synchronization between enterprise systems and multiple AD domains
User interfaces for Microsoft SharePoint, Outlook Web Access, and the Windows Logon screen

Profile Manager

User self-service for their personal directory information with approval workflows
Directory information synchronization between enterprise systems and multiple AD domains
Improves the quality of data by providing dropdown lists and enforcing rule-based value generation

Provisioning Manager

Automated role-based user provisioning and de-provisioning for a broad range of enterprise systems and directories
Monitors enterprise systems providing true bi-directional communication of events and changes
Self-registration workflows enable users to securely add themselves to directories without administrative intervention

Role Enforcers

Enables the discovery, administration, auditing, and enforcement of a single role-based authorization model across all resources and systems
Role Enforcer modules leverages EmpowerID's flexible Role-Based Access Control (RBAC) to lower costs, reduce errors, and improve security
Modules available for: Microsoft SharePoint, Windows File Shares, Windows Print Shares, Microsoft Exchange, Active Directory and LDAP Groups, and Custom Applications

ILM Connect

Replaces complex provisioning code in ILM Management Agents with visually designed Windows Workflow Foundation workflows
Role-Based Entitlement Management for ILM to answer and enforce "who has access to what, why, and for how long?"
Increases ILM compliance with enterprise-wide reporting, automated attestation, and separation of duties enforcement

Connect Modules

Enable EmpowerID's workflow-based provisioning for a variety of directories, operating systems and applications
Provide password and profile information synchronization for a wide variety of platforms
Connect modules available for: Active Directory, LDAP, Linux/Unix, MySQL, Microsoft SQL, Oracle, Custom Applications, SAP, Midrange (AS/400), Microsoft Identity Lifecycle Manager, and custom applications

BPM Studio

Visual designer for the EmpowerID Business Process Management Server
Allows users to extend out of the box workflows or create entirely new ones
Drag and drop designer and property mapper with rich library of shapes

Identity Lifecycle Management

Automated role-based user provisioning and retirement
Password synchronization & self-service reset
Directory information synchronization & self-service
Delegated identity administration
Automated attestation & continuous compliance enforcement

Role-Based Entitlement Management

Unifies visibility, audit, and enforcement over all enterprise systems with a flexible Role-Based Access Control (RBAC) system
Centralizes the control of access and the enforcement of policies for users based on their specific role and location in the organization
Covers a broad range of IT systems including: Microsoft SharePoint, Active Directory & LDAP Groups, Windows File Shares, Windows Print Shares, Microsoft Exchange, and Custom Applications

Resource Lifecycle Management

EmpowerID's automated, self-documenting and auditable workflow processes manage the entire lifecycle of your enterprise resources
Full lifecycle management including: provisioning, inventorying, enforcement, management, certification and retirement
Lifecycle Management for Windows File Shares, Windows Print Shares, Microsoft Exchange, Active Directory & LDAP Groups, and custom applications

Sharepoint Extranet Directory

Automated workflow-based user self-registration and site access requests
Maintains SharePoint extranet user accounts in EmpowerID
Inherent security, routing, approvals, and reporting
Role-based delegation with workflow approvals and reporting
Self-service password change, forgotten password reset, and account unlock
User profile self-service with workflow approvals

Business Process Management

First Identity and Role-Based Entitlement Management platform built on a Business Process Management Platform (BPM)
Complex workflows offer comprehensive security "baked in", eliminating the vulnerabilities created by traditional workflow applications
Friendly workflow designer coupled with a huge library of shapes makes IT organizations more agile and SOA-compliant

Business Process Management

First Identity and Role-Based Entitlement Management platform built on a Business Process Management Platform (BPM)
Complex workflows offer comprehensive security "baked in", eliminating the vulnerabilities created by traditional workflow applications
Friendly workflow designer coupled with a huge library of shapes makes IT organizations more agile and SOA-compliant

Microsoft PowerShell

Visually design business processes by dragging and dropping PowerShell shapes and the pipeline connections between them
Controlled delegation of PowerShell driven workflows on a role-based access control platform
Automate complex systems management tasks across remote machines with detailed logging and reporting

Role-Based Access Control

Enables immediate non-disruptive roll out of a role-based entitlement management model
Assignment based upon what a person does and where they work dramatically reduces "role bloat"
Resource Role definitions ensure consistency and accurate reporting of actual access rights

Metadirectory

Provides a rich and extensible schema enabling attribute synchronization and live data access for a diverse range of directories and application servers such as Active Directory, LDAP, SharePoint Profiles, Unix/Linux, and database applications.
An extensive role-based access control metadirectory that models the real world with People, Accounts, Roles, Business Locations, Directories, Resource Systems, Resources, Applications, and Policies
Allows developers to move security code out of their applications and into a central authorization system

Active Directory

Manage Active Directory using Microsoft's most advanced technologies: .NET 3.5, System Directory Services Protocols programming layer, ASP.NET Membership & Role Provider, Windows Workflow Foundation, Windows Communication Foundation, and PowerShell
Active Directory management including: user provisioning, password management, information management, corporate white pages, and delegated user and group administration
Workflow and role automation for delegated administration and self-service for Active Directory and Exchange, including support for Resource Forests

EmpowerID Role Enforcer for Exchange

Role-Based Lifecycle Management and Permissions Enforcement for Microsoft Exchange

EmpowerID Role Enforcer for Exchange automates and simplifies the complex process of provisioning, managing and auditing Microsoft Exchange mailboxes, contacts, and public folders throughout their entire lifecycle. Role Enforcer for Exchange inventories and manages these Exchange assets using Role-Based Access Control (RBAC) to create secure Resource Entitlements. EmpowerID's user-initiated workflows manage these Resource Entitlements throughout their lifecycle.

Role Enforcer for Exchange extends far beyond simple Exchange mailbox creation, editing and deletion by providing workflows and workflow building blocks that cover all aspects of Exchange mailbox management. EmpowerID offer full support for all Microsoft PowerShell management tasks for Exchange 2007 as easy-to-use graphical workflow shapes.

Role Enforcer for Exchange offers workflow automation and role-based management for even the most complex Exchange environments, including the Exchange Resource Forest model. The Exchange Resource Forest model separates the Exchange Mailbox Infrastructure into a distinct Active Directory Forest from the various user account forests. This complex scenario provides additional security benefits but requires complex directory provisioning and synchronization between forests. Role Enforcer for Exchange leverages its Metadirectory and RBAC technology to manage both the mailbox user accounts as a unit and to keep them in sync. Provisioning, attribute flow, mailbox permissions enforcement, and de-provisioning are all handled in a unified and auditable manner with role-based security.

Role Enforcer for Exchange does not become yet another management console but is an extension of the existing EmpowerID self-service and delegated administration interfaces allowing Exchange management from the same security model and user interfaces used to manage all your enterprise resources. Management of diverse types of resources becomes straightforward with a single interface and security model for controlling access, automating resource provisioning and de-provisioning, and meeting security and compliance requirements. EmpowerID offers centralized Role-Based Access Control with workflow automation for all of your sensitive enterprise resources.

Key Features:

Automatic role-based provisioning and de-provisioning of Exchange Mailboxes as "Resource Entitlements"
Web-based delegation and self-service for all major aspects of mailbox management including permissions, quotas, email addresses and more
Multi-organization support for even large hosted environments
Native exchange mailbox permissions auditing and enforcement via roles and workflow processes
Wizards driven workflows make management easy for even non-technical users
Workflow-driven processes provide compliant audit trails and customizable approvals for transactions that are sensitive or have a financial impact
Full support for managing Exchange Resource Forests
Deleted mailbox recovery
Configurable load balancing of mailboxes
Role-based access maintains security boundaries between departments and business units
A single provisioning platform for audit and compliance needs