Avatier Identity Management Suite (AIMS)

Identity Management emerged in the late 1990s with electronic provisioning and expanded within a few years to include single sign-on (SSO), multi-factor authentication (MFA), and related services under the Identity and Access Management (IAM) umbrella. Over time, the market broadened further into IAM/IAG (Identity and Access Management / Identity Access Governance), adding access governance and intelligence, dynamic authorization management, risk- and context-based authentication/authorization, and cloud identity services. When evaluating products in this category, emphasis is placed on “suites” as integrated solutions (not mere bundles), with integration assessed across platform support and deployment models, administrative and end-user interfaces, data models, APIs, and deployment.

Avatier is positioned as an early IAM pioneer and the only original player still independent. It also pioneered a modular suite approach, with all modules developed in-house. Founded in 1997 in Pleasanton, California, Avatier is privately held, has grown steadily (if sometimes slowly), serves 500+ clients, and has expanded beyond a formerly US-centric footprint with offices in Munich, Dublin, London, and Singapore plus partnerships to improve worldwide service.

The Avatier Identity Management System (AIMS), also promoted as Avatier Total Identity Management (ATIM), includes Password Station, SSO, Identity Enforcer (provisioning and access requests), Compliance Auditor (access governance/certification), Group Enforcer (rules-based AD group automation), and Group Requester (self-service group lifecycle and membership). A core differentiator is that modules can be deployed independently or together, supported by quick-start best practices and post-go-live configurability. Overall, the suite emphasizes integrated, web-configured administration and a shopping-cart-style “Assignment Management” approach to requesting access and other resources, while currently lacking Privileged Account Management and Identity Federation (with PAM stated as on the roadmap).

• Electronic provisioning was introduced in the late 1990s, marking the beginning of Identity Management (IdM).
• IAM expanded within a few years to include SSO, MFA, and other related services.
• IAM/IAG encompasses access governance and intelligence, dynamic authorization management, risk- and context-based authentication/authorization, and cloud identity services.
• Avatier is described as the only original IAM-era player to survive as an independent vendor.
• Avatier was founded in 1997 in Pleasanton, California, and is privately held.
• Avatier currently serves over 500 clients.
• Avatier has offices in Munich, Dublin, London, and Singapore.
• AIMS/ATIM includes modules named Password Station, Single Sign-On, Identity Enforcer, Compliance Auditor, Group Enforcer, and Group Requester.
• Password Station supports SMS authentication and one-time codes via email, and can invoke Google CAPTCHA for public-facing self-service reset sites.
• Avatier Identity Management Suite lacks Privileged Account Management and Identity Federation, with Privileged Account Management stated as on the roadmap.

• “In reviewing products in this category, we favor what are called ‘suites’… a suite is defined as an integrated solution.”
• “One of Avatier’s strongest selling points is that each module can stand on its own, or be installed in conjunction with any one or more of the other modules.”
• “The company also offers a ‘quick start’ option, using best practices derived from the many installations completed over the years…”
• “Password Station allows users to reset their passwords anytime and anywhere using a Web browser, automated phone system, RSA SecurID, and even voice recognition.”
• “Avatier SSO… manages cloud application sign-on without replicating enterprise identities, thus eliminating dual administration, redundant processes, and new costs.”
• “Identity Enforcer is the provisioning module of AIMS, but it’s not your father’s provisioning service.”
• “Avatier Identity Enforcer is a one-stop shop for requesting access… based on a shopping cart metaphor.”
• “Compliance Auditor has a built-in workflow system for automating Identity and Access Governance (IAG) access certification reviews.”
• “The ‘Test Rule’ capability lets administrators safely review rule based group management results before enabling a rule in production.”
• “Avatier is a vendor that takes a somewhat different approach to IAM/IAG from most of the others.”