Hitachi ID Bravura Security Fabric

Digital identity is a dominant attack vector in major breaches, with adversaries typically starting by compromising user accounts, then pivoting to administrative or service accounts to exploit elevated privileges for theft of financial data, health records, or intellectual property. Because passwords still underpin access to many user, shared, administrative, and service accounts, secure password and privileged access management remain critical. Regulatory requirements also accelerate adoption, including Germany’s IT-Sicherheitsgesetz incident-reporting and security expectations for critical infrastructure operators, and U.S. Sarbanes-Oxley segregation-of-duties mandates.

Traditional IAM systems provision and govern identities, credentials, authentication/authorization (SSO/WAM), federation, and lifecycle governance, historically for single enterprises but increasingly extended to partners and customers. Modern demands—hybrid and multi-cloud environments, B2E/B2B/B2C use cases, and automation—drive API exposure for orchestration and DevOps enablement.

Hitachi ID (founded 1992 as M-Tech; acquired by Hitachi in 2008) offers the Bravura Security Fabric: an integrated suite comprising Bravura Identity, Pass, Discover, Group, and Privilege, sharing common components (connectors, discovery, MFA, UI, high availability) and a consistent API. Bravura Identity manages identities and entitlements at massive scale, supports extensive connectors and standards (SCIM/SPML), enforces workflow-driven changes with auditability, supports segregation of duties (including nested entitlements), time-bound access, analytics-driven role optimization, and mobile access via a proxy that avoids public exposure.

Bravura Pass provides password synchronization, self-service resets (including pre-boot), a telephone reset module with optional voice biometrics, vaulting, and SAML federation with MFA. Bravura Privilege secures and rotates privileged credentials in an AES-encrypted vault with salted encryption, supports multiple privileged access methods (proxying, elevation, command execution), records sessions with anti-tamper controls, integrates with ticketing and SIEM, and reduces usability friction via multi-account workflows and browser-based session control.

• Hitachi ID Systems was founded as M-Tech in 1992 in Calgary, Canada.
• The first password management product, P-Synch, was released in 1995.
• The company was acquired by Hitachi in 2008 and became known as Hitachi ID Systems.
• Hitachi ID has more than 1,300 licensed customers serving more than 14.5 million users.
• Bravura Security Fabric includes Bravura Identity, Bravura Pass, Bravura Discover, Bravura Group, and Bravura Privilege.
• Bravura Identity can scale to directories containing millions of identities and hundreds of thousands of groups.
• Bravura Identity offers more than 120 connectors and supports standards-based administration via SCIM and SPML.
• Bravura Security Fabric ships with over 200 connectors to directories, systems, and applications.
• Bravura Privilege stores passwords in an AES-encrypted vault and uses a random 128-bit salt prior to encryption.
• Bravura Security Fabric components run on Windows Server, IIS, and Microsoft SQL Server.

• “Digital identity was a primary attack vector in nearly all the headline-grabbing data breaches of the last few years.”
• “Managing passwords securely has never been more important.”
• “By exposing key IAM functionality via APIs, workflow and orchestration capabilities can span across multiple environments as well as providing DevOps support through automation.”
• “Every change processed by Hitachi ID Bravura Identity goes through a workflow process, which supports validation, calculation, authorization and audit history.”
• “Workflows can also be used for manual fulfillment in cases where a connector is not available or not yet deployed.”
• “The self-service and telephone reset options can significantly help reduce help desk costs.”
• “To eliminate security risks due to passwords embedded in scripts and applications, PAM provides a password retrieval API.”
• “Elevated privilege sessions can be recorded to create strong accountability and comply with regulations in some jurisdictions.”
• “If users attempt to disable recording, Hitachi ID Bravura Privilege can shut down the session and send alerts.”
• “One of Hitachi ID’s driving principles is to help customers reduce deployment and technical support costs while providing a full IAM solution.”