Introduction
Accops HyID is an identity and access management (IAM) solution aimed to safeguard critical business applications and data from internal and external threats. HyID provides enterprises with strong control over endpoints, enabling contextual access, device entry control, and a flexible policy framework.
The out-of-the-box MFA is compatible with all modern and legacy cloud and on-prem apps. It enables strong authentication based on OTP delivered via SMS, email, and app, biometrics, and device hardware ID & PKI.
The Single sign-on (SSO) feature provides better security and convenience.
Using HyID, enterprises can monitor the security posture of the endpoints, including BYOD devices, and grant or deny access based on real-time risk assessment. With HyID in place, the system can generate alerts if a user's access to any corporate application breaches the set risk thresholds.
HyID provides actionable intelligence, enabling organizations to detect and prevent identity thefts and misuse of privileged rights. Detailed audit logs on who accessed what, when, and how, enable compliance with regulatory norms.
Accops BioAuth – a module of HyID, is a biometric authentication server providing fingerprint and face authentication solutions. BioAuth can quickly enable biometric-based multi-factor authentication to any corporate application, PC, or laptop.
Organizations can choose between fingerprint and facial-based authentication or bring their fingerprint scanners and use BioAuth to manage the biometric data capturing, enrollment, identification, and authentication of users. BioAuth’s flexible workflow enables the maker-checker process for user onboarding possible in any complex organizational structure. BioAuth provides support for multiple fingerprint readers as well as Microsoft Windows WinBIO.
BioAuth integrates out of the box with Accops HySecure (Secure Remote Access solution) to enable strong MFA to remote users. When integrated with Accops HyID, BioAuth can be used for any corporate application that supports Microsoft Active Directory or SAML protocol for authentication.