Entrust Identity Guard is a representative of the rather new market segment of Versatile Authentication Servers (VAS) and offers a single administration interface for managing up to twelve different authentication factors or authentication methods, respectively. The number of authentication factors and the internally created, low cost grid cards are the outstanding features of this platform independent solution.
The flexibility regarding choice of underlying operating system as well as the well-structured web GUI allow efficient management – from deployment of personal grids to issuing or termination of token assignments to users. For special purposes a command line interface is available, while the initial configuration steps for several main components can be performed via an additional start screen.
Easy integration with existing technologies such as LDAP directories, databases and RADIUS servers is another key feature while the new Self Service interface allows for self-registration and unlocking of blocked accounts through combined knowledge/ownership mechanisms. User thus can enroll themselves in applications and chose their preferred form of authentication, which automatically creates the registration request for the method of choice inside Identity Guard. From the KuppingerCole point of view, Identity Guard could also offer a valuable technology basis for authentication service providers in the internet, as SAML 2.0 Identity Provider capability is supported within the tool.