|
Wallix AdminBastion centralized authentication enables all Wallix AdminBastion users to log onto all devices for which they are authorised using a single password and without the need to know the password for the account on the target device. |
  |
1° The Wallix AdminBastion user must first be authenticated on Wallix, using his/her authentication data (login/password or SSH key), that may be stored in Wallix AdminBastion, or in an external directory (LDAP, Active Directory, Radius, etc.). 2° The use must then indicate the desired device (e.g. Sun server), along with the account to use (e.g. root). |
|
AES 256 ALGORITHM ENCRYPTION Thus, the service provider (or internal administrator) does not need to know the passwords for the target devices in order to log on, thus avoiding the need to disclose sensitive passwords to non-company staff. A SINGLE PASSWORD FOR ALL DEVICES Additionally, only one password is required to log onto all authorised target devices. Finally, as the passwords for the target accounts are known only to Wallix AdminBastion, they are thus of the "machine to machine" type and can be significantly stronger than passwords for use by humans. |
