- Protect remote access to the corporate network when employees are working from home.
- Ease of integration was critical. The authentication system had to become part of their current security and application infrastructure (based on Tivoli Access Manager).
- OneSpan Authentication Server Framework
- Digipass® GO 3
- OneSpan Authentication Server Framework was easily integrated, avoiding a situation in which separate authentication servers need to be installed and maintained.
Sensitive information stored on the bank’s internal network needed to be adequately secured when accessed by employees working from home. This required security that was easy to use and easy to integrate. The bank selected Digipass GO 3 for their employees, in combination with the OneSpan Authentication Server Framework, which runs in the bank’s WebSEAL environment.
Ease of Integration
For Jyske Bank, ease of integration was a top requirement; the bank wanted to avoid installing separate authentication servers. The new authentication system had to become part of their current security and application infrastructure.
“The OneSpan Authentication Server Framework solved our challenge,” says Erik Ladefoged, Lead Infrastructure Architect at Jyske Bank. “This authentication platform can be easily integrated in our existing application infrastructure and through EAI (External Authentication Interface) can be integrated in our existing IBM Tivoli Access Manager environment. This means we saved two servers, and lowered both the costs and operational risks.”
OneSpan knows the business and is very reliable. Their support and knowledge is excellent. And the ability to integrate OneSpan Authentication Server Framework as a library into our existing application and security infrastructure was the deciding factor.
Integrated in Three Weeks
Integrating the OneSpan Authentication Server Framework into the bank’s existing environment offers a lot of advantages. First, it cuts costs. Instead of managing and paying for two separate servers, now only the existing application server needs to be maintained. Second, the risk of server downtime was significantly reduced. This assures more continuity and stability in the whole authentication process.
Erik Ladefoged explains his satisfaction with the integration:
“We did not have to work with an integrator. Everything was done by ourselves, and it went very well. It took about three weeks before everything was up and running.”
Two Separate Channels
Jyske Bank chose OneSpan for several reasons.
“First of all, the company knows the business and is very reliable. They have the experience and we knew from other projects that their support and knowledge is excellent,” Erik Ladefoged explains.
“The OneSpan solution is cheaper than those of other vendors. And last but not least, the ability to integrate OneSpan Authentication Server Framework as a library into our existing application and security infrastructure was the deciding factor.”
Digipass GO 3 was selected because this small device is easy to use. With one push of the button, an OTP is generated. In addition, “We preferred a Digipass GO 3 device to a mobile solution, as we wanted to make sure that two separate channels are used with the authentication process.”
The out-of-band principle starts from the idea that two separate networks, of which one is different from the primary network, are used simultaneously to communicate between two parties. This adds an extra layer of security and prevents hackers from grabbing information.
“We are very pleased with the way the solution works,” concludes Mr. Ladefoged. “On the client-side, everything works quite smoothly. Also, on the server-side, we haven’t experienced any problems. OneSpan Authentication Server Framework is well-integrated in our WebSEAL environment, so we are happy that our integration and security concerns are addressed.”
Jyske Bank was founded in 1967 and is Denmark’s thirdlargest bank with more than 3,500 employees, 225,000 shareholders and 100 branches. The bank’s head office is in Silkeborg, with business customer branches in Hamburg, Zurich, Gibraltar and Cannes.