Centrify White Papers

Centrify Enabled Samba

Mon, 21 Dec 2009 08:00:00 GMT

Samba, one of the most popular Open Source technologies in use, allows IT administrators to share directories and files hosted on UNIX and Linux systems with Windows users. However, Samba can be difficult to deploy, and its inability to centrally store UNIX identity information in Active Directory makes it unworkable in most enterprise scenarios. This white paper describes how you can use Centrify DirectControl to make Samba more secure, more manageable, and enterprise ready.

FISMA Compliance through Centralized Identity and Access Management Leveraging Microsoft Active Directory

Fri, 13 Feb 2009 08:00:00 GMT

The Federal Information Security Management Act (FISMA) lays out a comprehensive set of security requirements that are currently top-of-mind for federal IT managers. FISMA addresses security issues in a comprehensive manner, covering everything from identity management to physical building security. This white paper focuses specifically on identity and access management (IAM) issues, using the guidance provided by NIST Special Publication 800-53, Revision 2, Recommended Security Controls for Federal Information Systems, as a roadmap.

Top Five Benefits of Using Windows Group Policy to Secure and Manage UNIX, Linux and Mac Systems

Thu, 20 Mar 2008 08:00:00 GMT

Applying standardized security and configuration policies to enforce IT security requirements and meet government and industry regulations remains one of the most difficult challenges for organizations with large numbers of mixed Windows, Linux, UNIX and Mac computers. Since the release of Windows 2000, IT administrators have used Group Policy to globally distribute computer and user policies across their Windows environment. No single solution addresses the same need across all Linux vendors and distributions, and the same is true of UNIX vendors. Centrify DirectControl's ability to extend Windows Group Policy to Linux, UNIX and Mac systems now points the way toward consolidated, centralized and consistent cross-platform policy enforcement.

Single Sign-On and Federation for Java/Web with Centrify DirectControl and Microsoft Active Directory

Thu, 22 May 2008 08:00:00 GMT

Applications running on Apache, JBoss, Tomcat, WebLogic and WebSphere have traditionally required additional authentication and identity stores that are inefficient and expensive to manage and pose security risks due to gaps in maintaining and deprovisioning accounts. Complying with SOX, HIPAA, PCI, and other government and industry regulations is also more difficult. Enterprise efficiency is impacted as well, with IT constantly provisioning and resetting passwords. Moreover, external users and partners cannot participate in federated scenarios. This white paper describes how Centrify DirectControl for Java/Web delivers single sign-on capabilities for web applications and provides major benefits in the form of increased security, ease of use and enterprise readiness.

Single Sign-On for SAP on UNIX with Centrify DirectControl and Microsoft Active Directory

Wed, 17 Sep 2008 08:00:00 GMT

Many of the largest, most recognizable and successful organizations use SAP. But to the end-users within those organizations who need access to SAP, this means yet another username and password they have to remember and constantly enter and re-enter. To IT managers, SAP represents yet another authentication and identity store to manage. In addition, given the sensitive nature of the data stored in SAP systems, there is a compelling need from both a security and compliance perspective to ensure that communication and access to that sensitive data is done in a highly secure manner. This white paper describes how Centrify DirectControl for SAP delivers single sign-on capabilities for SAP and how this ability translates into major benefits in the form of increased security, ease of use and enterprise readiness.

New: Implementing Detailed User-Level Auditing of UNIX and Linux Systems Using Centrify DirectAudit

Tue, 13 Mar 2007 08:00:00 GMT

Organizations today are facing a growing list of IT security challenges, from complying with Sarbanes-Oxley, HIPAA and Payment Card Industry standards, to protecting against the threat of insider attacks. This white paper examines the compelling business and technical case for centralized auditing of mission-critical UNIX and Linux systems, describes how Centrify DirectAudit's integrated architecture enables you to meet regulatory requirements and protect against insider threats, and describes how DirectAudit can help you better troubleshoot UNIX/Linux availability problems.

Updated: Centrify's Solution for Migrating Unix Directories to Active Directory

Fri, 5 Jan 2007 08:00:00 GMT

In the Unix and Linux world, multiple directory technologies exist for handling user accounts, passwords, system access and usage policy. An ideal solution for consolidation would be to leverage Active Directory for access management beyond Windows. This white paper discusses how organizations can migrate existing Unix directory systems to Active Directory using the Centrify DirectControl suite and Centrify's unique Zones technology.

Using Microsoft Active Directory to Address Payment Card Industry (PCI) Data Security Standard Requirements in Heterogeneous Environments

Wed, 27 Dec 2006 08:00:00 GMT

The Security Standards Council of the Payment Card Industry (PCI) owns and maintains the Data Security Standard (DSS), which is a rigorous set of requirements that all merchants, payment processors, point-of-sale vendors, and financial institutions must follow in order to retain their right to use the payment system. This white paper describes how Active Directory and DirectControl address specific PCI DSS requirements.

Integrating Centrify DirectControl with Identity Management Systems

Wed, 27 Dec 2006 08:00:00 GMT

This white paper provides detailed examples of how to integrate Centrify DirectControl with commercial off-the-shelf Identity Management Systems. It demonstrates how to handle common Identity Management events and discusses how DirectControl can simplify provisioning tasks and strengthen security when used in an environment that includes LDAP-based systems, databases, and portal servers.