|
|
 |
 |
|
Security is a key concern to every organization. To ensure that important information is kept safe, ePeople Teamwork provides enterprise-class security that follows industry-standard best practices, and utilizes proven Internet-based security standards such as Hypertext Transfer Protocol Secure (HTTPS), Secure Sockets Layer (SSL) encryption, SAML (Security Assertion Markup Language) and Digital Signature Algorithm . Because these technologies are already widely adopted, a secure ePeople Teamwork installation can be deployed very rapidly. And since ePeople Teamwork is designed to connect internal employees, external partners, and customers, it employs these highly secure connections both inside and outside your company. ePeople Teamwork security focuses on three key areas:
- Authentication – This answers the question, "Who is this user?" ePeople Teamwork creates a personal account for every user, including user ID and password, and utilizes secure HTTP, digital certificates, session timeouts, and cookies to manage a secure account creation and login process. Within the application, ePeople maintains a comprehensive audit trail that records all user access and activity. In addition, ePeople Teamwork also offers single sign-on integration with your enterprise systems so that users log on only once, rather than re-authenticating themselves each time they access ePeople Teamwork. This integration is based on SAML (Security Assertion Markup Language), an emerging XML-based industry standard.
- Authorization – This answers the question, "What is the user allowed to do?" ePeople Teamwork allows data security and business function access within the application to be managed by user-based permissions. Permissions give individuals and groups of users the right to access specific features and data sources within the application. For ease of administration, permissions are maintained in a central repository, and can be automatically applied via single sign-on integration.
- Secure exchange of information – ePeople Teamwork uses standard Internet protocols such as HTTPS to ensure that no unauthorized third party gains access to information as it is transmitted from the server to the web browser, and the application uses digital signatures on messages to prevent fraudulent messages and Internet attacks. In addition, ePeople is firewall friendly, with all communications into and out of the system using standard Internet ports.
|
|
