Review: eToken Enterprise

eToken Enterprise provides a more cost-effective solution than SSOs to the problem of users having a different login credentials to Windows networks and the web based resources they use.

The product solves this problem by storing a user's username-password combinations securely encrypted in a USB token. It is not an SSO product, because it does not give transparent access to all resources following a single login – each time you need access to another resource, you have to provide your password. But you have only one password, the one needed to access the USB token.

eToken for Windows Network Logon works with Windows NT/2000/XP and supports Active Directory. To logon, a user inserts the eToken into the USB port and enters his password. This password allows the release of the encrypted user information stored on the eToken. The authentication profile is retrieved from it for the relevant domain server and is transferred from the eToken directly into the Windows Graphical Interactive Network Authentication (GINA) logon mechanism.

The components needed to run on the user's workstation are the eToken Runtime Environment (RTE) and a special logon application enabling communication with the GINA logon application.

The eToken Network Logon Administrator application enables the network administrator to specify and store user-access details on an eToken. These details can include domain name combinations, username, and authentication password, plus PKI keys and certificates when using Windows 2000/XP Smart Card logon technology (USB tokens as well as traditional credit card-sized cards).

For:

Scalable with an intuitive GUI and wizards to make implementation easy.

Its full benefits can be realized only in an applicationdevelopment environment.

Provides SSO without modification to applications, but can also provide a full Java-based development environment for developers wishing to make the applications fully security-aware.