Re: Replacing the AS400 signon manager?

Jared - we wrote an interface between the 400 and the SecurID token / ACE
Server product from RSA - which provides two factor authentication for our
customers.  However most people prefer to use this level of authentication
at the network logon - rather than the 400.  Are you saying that you want a
high level user to get prompted with strong auhentication for multiple
signons in a day?  With strong authentication it is always a difficult
balance between security and happy users.  Make them use strong
authentication on a Win logon, then 400, then in an application and you have
some very unhappy users.

Regards 

Martin A Norman 
Technical Services
SafeStone Technologies 
mnorman@xxxxxxxxxxxxxxxx 
1-800-558-3544 

This email and/or attachments are privileged and confidential and intended
solely for the addressee. If you are not the intended recipient, please
notify us immediately. Disclosure, distribution or copying of this email
other than by the addressee is strictly prohibited. The company does not
warrant that the information is free of a virus or any other defect that may
affect the recipient's computer system and it is your responsibility to scan
attachments (if any).

date: Thu, 5 Aug 2004 14:24:56 -0400 (EDT)
from: jared <jhunter@xxxxxxxxxxxx>
subject: Re: Replacing the AS400 signon manager?


Rob wrote:

> I don't think you can do that.
> What are you trying to accomplish?

I'd like to implement very strong authentication for users that have a lot
of privs on the system.

/j