Middle East Partner Summit

Transcription

1 Middle East Partner Summit 1 Title

2 Gemalto Authentication & Identity Protection Strategy What s in there for you? Jeremy Tomlin 18th April 2017

3 SafeNet Authentication Service Jeremy Tomlin

4 SAS Cloud by Numbers Q AUTH AS A SERVICE fully-automated authentication service in Gemalto hosted cloud 0 Upfront investment TCO Saving Compared to other solutions 30 60% 400+ Minutes to set-up and deploy Technical integrations 30 + TELCO s 2,500 Global partners 4,217, % Service availability Subscribed users The smallest customer 6 9,200 Total Customer accounts (VS s) 1.08M The largest customer Over 2,000,000 Authentications Processed every day 250 Peak load of authentications processed per second 700+ Number of Authentications per second SAS can process 3,957,931 Subscribed users 12 months ago 62.3M Number of authentications processed in Mar M Number of authentications processed in Mar 2016

5 SafeNet Authentication Service Protects Everything and Everyone, Anywhere

6 SafeNet Authentication Service Authentication Methods PUSH OTP Hardware Software OOB OOB TOKENLESS Grid Maximum Convenience for Low Assurance Needs Maximum Security for High Assurance Needs

7 Automated User Synchronization Synch any user store with SafeNet Authentication Service Periodic synching every 20 minutes Non-intrusive Secure encrypted communications Multi-domain support (e.g. Supports any user store SQL, LDAP, AD, ODBC, Lotus, Novell, Other via custom field mapping Other importation methods CSV File Manual Self Service Management API Integrate user store once, and trigger automated workflows throughout

8 2016 SAS Bookings: On the fast track and accelerating 40M Bookings M M 60% growth Q1 Q2 Q3 Q

9 60% growth... More users per organisation The average percentage of users who currently use two-factor authentication, and the expected percentage in two years time. Currently (2015) Currently (2016) 37.75% 40.49% In two years' time (2015) 51.43% In two years' time (2016) 61.69% 9

10 Why is SafeNet Authentication Service the Best? Multi tier/multi tenant Most applications supported Industry analyst support Flexibility Automation Security Ease of use Easy POC s UK and Canadian DC s Partners Certifications Complete range of tokens Varied billing model Designed for cloud Reputation SLA Simple migration path Self service capabilities All use cases Easy to demonstrate 10

11 MobilePASS+ Push QR code enrolment Biometric PIN 11

12 2016: Revving Up Great service availability Launch of MobilePASS + Push Default Soft Token for Cell phones 60% sales growth in SAS Launch of Context Trusted Network and Device Multi award winning service 12

13 Service surround Monitoring site (tool) Synthetic monitoring. Real time and automated Communications approach Monthly newsletter 13

14 Sales Enablement Usage Based Billing New pricing Model Long live the SAS Quote tool 14

15 Cloud First Strategy Feature parity almost Push and context will not be available in SAS PCE during 2017 Promote SAS Cloud wherever you can Customers will gain more by being on SAS Cloud Plus the potential to use STA if they are on Cloud - easier upsell for you 15

16 SafeNet Authentication Service 2017 Strategic Focus Focus on MobilePASS+ as strategic mobile token MP+ support for Windows Desktops Management console redesign Introduce Push Expand eco-system for Push OTP & Context More SAML integrations, easier to set up New user initiated self-enrollment Context based Authentication Streamline user experience with MobilePASS+ MobilePASS+ for Windows, and SDK Management Console UX Refresh 16

17 SafeNet Trusted Access (STA) Solution Overview

18 3 Ways to think about the Access Management Requirement

19 MFA Market Dynamics The Market is changing quicker than we have seen before More use cases than just VPN 2016 Roadmap delivery helps 19 25% more users deploy MFA for additional applications 1 in 5 organizations deploy MFA for more than 5 applications Convenience Security Improved token-holder experience Push with MobilePASS+ Context: Network, Device

20 Why more use cases? We wanted access from anywhere on any device We added applications We wanted partner access We wanted cloud applications 20

21 Use Cases for Our Customers What do you use SAS to secure? Infrastructure Privileged Access Methods by CyberArk Many backend systems are protected using PAM VPN User remote access to Company network EVO Citrix Remote Desktop Access from outside the Company Customer 1: EMEA Customer 2: NORAM O365 authentication SSO service MFA enabled for step up authentication for sensitive or critical apps SSL VPN for sensitive contracts Applications (Done) Administration applications for upper management (Several Internal Applications) Intellectual Property Lifecycle Management (Memotech ) Document management for product development (Documentum) Business Practice Case Management Company Investigation System Litigation Data Collection Quality Management (TrackWise Sparta Systems) BPOS (MS Exchange) investigation system Customer 3: NORAM NIX PAM, and Appliance OS Windows OS Citrix Applications (Planned) Parts of SAP (including Data Warehouse) Financial Consolidation and Reporting (CEGID) HR documents (includes a SAP extension) (Digital Personnel File from Aconso) 21

22 Imagine what its like to work at one of these companies? 07:58 Connect to VPN generate and use OTP 07:59 Connect to generate and use OTP 08:30 Connect to SFDC generate and use OTP 09:00 Connect to SAP generate and use OTP 09:15 Connect to Legal System generate and use OTP 10:00 Connect to Sensitive M&A System generate and use OTP 10:05 Have coffee and complain about lack of productivity Convenience Security Time for Change SAML, PUSH and Context all help but are not enough More customers are realising this every day 22

23 Lap 2

24 Technology has changed more in the last 20 years than the last two thousand, and it s accelerating exponentially Security is no longer an acceptable trade off for convenience Companies now face the largest shake up to working practices in a decade or two 24

25 In the past we had a perimeter to guard

26 Now we need a new approach

27 Cloud Technologies are forcing change Driven by

28 Budget Constraints 28

29 Meeting Security Audits & Compliance

30 Mobile Workforce 30

31 Users demand the latest technology

32 83% of global IT leaders already protect one or more cloud applications with twofactor authentication, a Gemalto survey shows

33 Cloud adoption brings a new set of challenges to users and IT Life for users is frustrating

34 Day in the life of a user 07:58 Connect to VPN Enter a Password 07:59 Connect to Enter a Password 08:30 Connect to SFDC Enter a Password 09:00 Connect to GoToMeeting Enter a Password 09:15 Connect to Service Now Enter a Password 10:00 Connect to Zscaler Enter a Password 10:05 Have coffee and complain about lack of productivity

35 Which ends as one of two ways 35

36 IT Admins have new challenges too. Life Cycle Management of user accounts in third party systems Increased Helpdesk load Visibility of user activity Enforcing corporate security policy Differing level of security between cloud vendors Loss of control on data AND OF COURSE..

37

38 The Impact of a breach is more than data

39 Making the Leaderboard with SafeNet Trusted Access

40 SafeNet Trusted Access Cloud-based access management service IDENTIFY APPLY Apply appropriate access controls MONITOR ASSESS Assess identity attributes and establish a level of trust SafeNet Trusted Access allows organizations to manage access to numerous cloud applications by validating identities, determining levels of trust and applying appropriate access controls each time the user accesses a cloud service.

41 Users/Groups Target Apps Adjust Define Policies Scenario-driven Compliance-focused Based on context & risk Set Auth rules by policy Monitor Acess 41

42 STA Demo 42

43 Track Conditions 49% of organisations are planning to implement SSO in the future 45% are planning on implementing an IDaaS solution Gemalto AIM Survey Spend on IAM going up Increase Stay the same 53% About 1/3 of organizations are planning to replace the following technologies in the next 2 yrs: MFA, Access Management, SSO, password managers 43 Decrease Don t know 41% 3% 2% Gartner, Jan 2017

44 Upgrading from SafeNet Authentication Service to SafeNet Trusted Access STA is an add-on to SAS that enables single sign on to numerous applications Maintain your current investment in 2FA Benefit from single 2FA and Access Management platform Combined technology platform - No rip and replace, simply purchase a license List of preconfigured apps (templates) SafeNet Authentication Service SafeNet Trusted Access Authentication SSO Session Management Scenario-based Access Policies Authorization Enforcement

45 Vision for the user 07:58 Connect to VPN Authenticate via push 07:59 catch up on 08:30 Connect to SFDC 09:00 Connect to SAP 09:15 Connect to Legal System 10:00 Connect to Sensitive M&A System 10:05 Have coffee and talk about politics and sport Convenience Sign in once Move between applications with no further authentication unless defined by the access policy

46 Reaching for new heights in 2017 Take the best authentication solution and bring it to the Access Management market Leverage SAS success to get SafeNet Trusted Access customer wins Help us make sure STA is in Gartner 2018 Access Management MQ 46

47 Western Union Business Services & Western Union Agents Business Need Reduce fraud in money transfers carried out by WU agents around the world Mitigate risk of breach Meet internal security audits Use Cases Secure access for WU agents who need to access to carry out money transfers Administrator access for users logging into WUBS Technical Need Cloud-based solution Needed to offer several different methods of authentication to meet the needs of different use cases and field conditions Needed to be able to provision tokens to agents who aren t listed in a central user store 47

48 How we addressed their needs The Solution: SafeNet Authentication Service Cloud etoken PASS HW tokens GrIDsure pattern tokens MobilePASS+ How we won Cloud capability was key Simplicity of the solution Flexibility: token provisioned onsite Reporting capabilities: ability to track usage by agents 48

49 United Technologies (UTC) Business Need Needed to replace RSA Wanted a cloud solution Use Cases Remote access via Cisco AnyConnect VPN The Solution: SafeNet Authentication Service etoken PASS HW tokens MobilePASS software tokens How we won Cloud delivery Opportunity for growth: Additional users who need to comply with DFARS regulation Smooth migration from RSA Very successful POC with close support from Gemalto 49

50 AT&T Partner Success AT&T Token Authentication Service (TAS) Drivers AT&T dissatisfied with RSA (on-prem service, no roadmap) Future path to broader access management offer Find replacement for existing users Internal competitor SecureKey The Opportunity Convert existing RSA users Grow with AT&T Sales Expand portfolio Success Factors Majority existing customers migrated, increasing user capacity New customers sold Well-placed for greater opportunities Perseverance through challenges 50

51 Celebrating Joint Success A Winning Service Winning Partners Winning Business Model 60% global growth SAS deals driven through the channel Recurring revenue model: 90% renewal rate Simple pricing model 51