Create One Access Point

Go the Last Mile Into Fragmented Identity Silos

Federated architectures offer a unique way to securely join your users—and your partner’s users—to the applications that make your business work, without sharing passwords or other sensitive information. But a scattered and complex infrastructure presents a considerable challenge for authentication and authorization, because the identity data you want to share with cloud applications is buried deep in directory, database, and web service silos.

The Challenge: Extracting Data from Scattered Silos

Today’s enterprises have many sources of identity, often stored in different formats, enforcing their own specific forms of authentication, and accessed by different protocols. Once these identity resources are pooled in a federation system or a cloud infrastructure, your Identity Provider (IdP) faces the issue of fragmented identification: how can you identify users across heterogeneous data sources, duplicate accounts, and various credential checking methods, including passwords, tokens, and certificates? When each IdP needs a way to integrate identity and delegate credential checking to different identity silos within the enterprise, gaining access to cloud-based apps just adds one more layer of complexity.
So how can you feed the identity provider with the information it needs from across your scattered infrastructure, including cloud applications?

The Solution: Create a Common Access Point for All Applications

As the pioneers of the virtual directory, identity integration is Radiant’s forte. By isolating applications from the complexity of backend sources and creating a federated identity hub for all identities—including customers, employees, and partners—RadiantOne creates a single point of access for your identity provider.
Powered by RadiantOne’s virtual directory, the Cloud Federation Service packages attributes into secure tokens, then sends the encrypted tokens to the appropriate Relying Parties, creating stronger security and greater flexibility to transmit identities to web-based applications.