Review: Trinity Secure Sign-On

Trinity is designed to allow enterprises to protect sign-on with smartcards, fingerprint biometrics, hardware tokens, passwords, or a combination of these methods.

Trinity authenticates access to operating systems, network services, Windows 32-bit applications, client server applications, web-based applications, and some host-based applications. Trinity also includes a fingerprint biometrics management system, and therefore becomes an identity management system.* It is based on a client-server architecture comprising Trinity Enterprise Management Server and Trinity client software for Windows and Citrix desktops.

Trinity Enterprise Management Server provides multi-factor authentication policy management, biometric fingerprint enrollment and management, smartcard issuance and management, and the management of enterprise sign-on services.

Trinity also provides plenty of advanced password management features, including the abilities to randomize passwords, share password credential sets between target applications, and enforce a variety of password rules.

There is also a comprehensive range of deployment and management tools, including the Sign-On Configuration Wizard, which quickly applies sign-on to most Windows and HTML web applications; the Sign-On Scripting SDK, enabling you to create new scripts for applications not supported out of the box or by the Sign-On Configuration Wizard; and the Audit Analysis Tool, which logs user and administrator events for auditing and reporting purposes.

Trinity Multi-Workstation Add- On is an optional extra that allows multiple workstations to share one fingerprint or smartcard reader which is connected to one workstation – valuable when a user has more than one workstation.

Supported client platforms include Windows 98/XP/NT/2000,plus Citrix MetaFrame and NFuse.

Trinity Enterprise Management Server runs on Windows 2000 or Solaris. Trinity also provides authentication and single sign-on to Entrust PKI credentials stored on a PC or smartcard.

*A Precise Biometrics 100MC combined fingerprint and smartcard reader was also supplied for this review. If your requirements are satisfied by password-only authentication, another version of Trinity is available.

For:

Supports fingerprint biometric hardware directly without any third party software.

Supports SSO only from Windows and Citrix-based workstations.

Combines multi-factor authentication with SSO and identity management in a single easy-to deploy product.