Evidian Identity & Access Management

Identity & Access Management (IAM) has evolved from a primarily preventative discipline—blocking unauthorized access through access administration—into a broader capability set that also detects and responds to threats. Early IAM centered on provisioning and the foundational functions of authenticate, authorize, and audit. A subsequent generation added access governance with stronger business participation and improved detection through integrations with Security Information and Event Management (SIEM) solutions. The current iteration expands further with Access Analytics and Intelligence: analytics mines historical access and entitlement data to identify trends and patterns, while intelligence turns these insights into actionable access decisions, enabling response as well as detection. Modern IAM also needs to integrate with adaptive authentication and authorization, real-time security intelligence, software-defined environments, and privilege management.

Evidian (Atos Group) offers a mature, modular IAM suite available for on-premises or cloud deployment, spanning Authentication Manager, Enterprise SSO, Web Access Manager, Analytics & Intelligence, and Identity Governance and Administration (IGA). Authentication Manager supports multiple assurance levels from passwords and knowledge-based methods to strong MFA, including smart cards, secure USB, RFID/NFC badges, OTP via SMS/email/push, biometrics (finger vein/fingerprint), wearables, and QRentry for self-service password reset and workstation unlock via QR scan and one-time passcode. Enterprise SSO provides consistent authentication across desktops and mobile devices, supports delegation within policy limits, and adds mobile features like automatic password entry and an eWallet vault. Web Access Manager delivers federation and policy-based authorization across multiple directories, supports SAML and OpenID Connect (plus OAuth/WS-Fed), enables API authentication, provides context-aware adaptive authentication, and offers dynamic authorization via an XACML-based PDP. Analytics & Intelligence unifies data from suite components for risk, compliance, dashboards, and reporting. IGA supports certifications, lifecycle management, workflows, provisioning, and connectors (including Office 365 and PAM tools), with continued expansion and tighter integration with analytics.

• Evidian is the IAM software suite of Atos Group and was founded in 2000.
• Evidian has more than 900 customers and over 5 million users.
• Evidian serves sectors including financial services, manufacturing, retail, transport, telecom, media, utilities, and public health.
• The Evidian IAM suite supports both on-premises and cloud deployment options.
• The suite includes Authentication Manager, Enterprise SSO, Web Access Manager, Analytics and Intelligence, and Identity Governance and Administration.
• QRentry enables users to unlock a PC by scanning a QR code at login with a mobile app that generates a one-time passcode.
• Web Access Manager supports multiple directories simultaneously, including LDAP, Active Directory, and ADLDS.
• Web Access Manager supports SAML (v1 and v2) and OpenID Connect for web or cloud SaaS applications.
• The Analytics and Intelligence module can generate reports in formats including PDF, CSV, XLS/XLSX, DOCX, RTF, HTML, ODT, and ODS.
• Identified challenges include lack of current FIDO support (planned), no current cyber threat intelligence integration (on the roadmap), and limited presence outside Europe.

• “In this latest iteration, IAM adds to its ability to prevent and detect by also providing the ability to respond to the security threats.”
• “Analytics gives the ability to perform data analysis of historical data and uncover trends or pattern that can be used to improve the decision-making process.”
• “Intelligence gives the ability to make access decisions that can be acted upon based on the patterns and trends found through data analytics.”
• “Together, access analytics and intelligence provide the ability not only detect, but to also respond to unauthorized access attempts.”
• “As the landscape of information security threats changes, so do the IAM capability requirements.”
• “Evidian’s Enterprise Single Sign-On (SSO) module of their IAM suite provides secure access to applications from desktops and mobile devices.”
• “Evidian’s Web Access Manager (WAM) module gives Identity Federation and policy-based authorization capabilities to the IAM suite offering.”
• “Their Adaptive Authentication can evaluate common risk factors, such as device fingerprint, time of day/week, IP address, geo-location, geo-velocity, as well as user attributes.”
• “An interesting capability is support for dynamic authorization management.”
• “Overall, Evidian delivers a well-rounded offering and has kept current with the evolving IAM capabilities organizations expect today.”