Adaptive Authentication

Transcription

1 Adaptive Authentication 1

2 Business need for Adaptive Authentication? Existing Single factor authentication has various risks associated- Single and hence weak control Key logger Trojans Malware attacks Brute force Replay, Dictionary attacks Shoulder surfing Repeated use of same password Usage of same password for multiple applications Password can be shared with others Easy guessing Session hijacking Liability issues due to password breaches 2

3 Features 2FA(factor) Authentication i.e. PIN+PASSCODE (The passcode changes every 60 second) Multi factor Authentication (Risk Based Authentication) in form of Security question which is an additional layer of security Transparent real-time fraud detection and authentication Monitoring and authenticate both login and post login activities Risk based self-learning engine which rapidly adjusts policies and controls to predict and protect against future attacks Identifying fraud intelligence 3

4 Process Workflow NEW Token creation request Create New Soft Token Request Set up security question Set up 6 digit PIN and submit for approval Request Terminated New Soft Token Request Created Importing the Token Import the Software token 4 Authenticate with a passcode

5 Step 1- Login to Self service console Access URL - on your browser Provide your user ID without any alias HCLTECH or HCLISD and click on GO Login with your password which will be same used for MyHCL and click on LOG ON. User must set up 5 security questions and click on SUBMIT YOUR REQUEST 5

6 Step 2-New token request Click on REQUEST A NEW TOKEN On the request a token page, set your 6 numeric digit PIN and confirm No special character and alphabets to be used. Remember the PIN as this would also be required once the token is imported on your system. Specify the reason for token requirement & the application is/are to be accessed through soft token. Request is submitted and is sent for approval and a mail is triggered to user with token details 6

7 Step 3-RSA Setup User to check if RSA setup is available on his/her laptop. Below are the steps to be followed: Click on START(Bottom most left icon on your desktop) Search RSA SecurID Token Red icon would be available (as shown in screenshot) If setup is Available on your system - Please skip next slide and proceed Not available on your system - Kindly perform steps provided in next slide Installation of RSA securid

8 Installation of RSA SecurID Once your New token request is approved an with Token No., Activation Code and Activation URL is shared. These details are now to be used to install the RSA MSI Package to use a soft token. Login to with your AD credentials (ID, Password and domain) In Security column, click on option VPN Click on RSA SecurID Save and run the setup, in case it is asking for administrator password to run the setup please raise the remedy using URL - under software installation category 8

9 Step 4-Request Tracking & Token Allotted REQUEST TRACKING BY USER In the Self-service console click on VIEW YOUR REQUEST HISTORY Status of the request i.e. pending or completed will be displayed Once request gets approved by approver, a mail will be delivered from rsaauth@hcl.com to the user along with status and details of the request (Note if mail doesn t show in your Inbox kindly do check in your Junk- ) For importing token the following details are sent in - Link to import token Token number Activation Code 9

10 Step 5-Importing a new Software Token Open the RSA package installed on the system, click Import from Web & the screen is displayed In the Enter URL field, please copy the URL received in mail from rsaauth@hcl.com. In the Enter Activation Code enter the activation code received in mail from rsaauth@hcl.com Note- Do not click the URL received in mail.kindly copy and paste in the RSA setup as shown in below screenshot. 10

11 Step 6-Authenticate with a Passcode In the SecurID desktop application, provide the 6 digit PIN set while requesting new token. Click on the ARROW button and PASSCODE will be displayed Access the application on MYHCL page When you encounter the RSA secure logon screen ( as shown in given snapshot), copy the token code by clicking on COPY button and paste it on the authentication page. Always Remember the PIN entered as this PIN would be used for your authentication while logging to the application. 11

12 Do you already have RSA token?? In case you already have any other token for accessing customer network OR some other HCL infra from Internet then this setting will help you to select correct token as described in screen shot. Once token is imported,below pop-up is received and you can change the name of this new token. Click Change Name You may keep name of this new token as Adaptive to avoid any confusion with other existing tokens being used 12

13 Exception for users unable to install RSA software on Desktop/Laptop In case you are not able to install the RSA software on their machines due to any of the below reasons, we have an option available for you:- Dedicated client network User sitting at client location from where RSA setup cannot be installed For these specific users, RSA token would be provided and installed on their Mobile Phones rather than their system. These tokens shall be imported on mobile phones once user provide their Business Unit head approval and raise an INC(path given on last slide) Below are the supported Platforms and Mobile devices for RSA token- iphone ipad ipod Blackberry Windows Mobile device Nokia Android Note- Secure ID tokens are easily available on App store 13

14 RSA SECURID SOFTWARE TOKEN 1.3 FOR IPHONE AND IPAD Platform OS version iphone ios v3.0 Or later ipad ios v3.2or later ipod ios v3.0 Or later 14

15 RSA SECURID SOFTWARE TOKEN FOR ANDROID The application is supported on below tested models of Android phones- HTC Aria HTC Droid Eris HTC Droid Incredible Google Nexus One Motorola Droid 2 Motorola Droid X Motorola Xoom Samsung Epic Samsung Moment Samsung Vibrant Google Nexus S Sony Ericsson Xperia X10 Samsung Galaxy Tab 15

16 RSA SECURID SOFTWARE TOKEN 1.1 FOR NOKIA Below are the Nokia mobile models on which this application has been tested successfully- Nokia N97 Nokia N97 mini Nokia C7 Nokia E7 Nokia N8 16

17 RSA SECURID SOFTWARE TOKEN FOR Blackberry Smartphones Below are the Blackberry smartphones on which this application has been tested successfully- All and versions All versions up to and higher All 5.0 versions All 6.0 versions All 7.0 versions 17

18 Queries/Concerns- In case of token not received from installation and configuration issue, kindly raise a remedy via BMC Remedy PAN India Users : Remedy ->Requestor console->new incident ->IT Services(HCLTech\HCLISD) ->Security->RSA Adaptive Authentication Related issues Geo users : Remedy ->Requestor console->new incident ->IT Services(Geo ->Access- >RSA Adaptive Authentication issues 18

19 19 Thanks!