Atos DirX Access

Identity and Access Management (IAM) is presented as a core cybersecurity foundation comprising provisioning, identity repositories, authentication and authorization, web access management (WAM), federation and Single Sign-On (SSO), governance and reconciliation, risk management, and integrations to other security systems. IAM is commonly divided into Identity Management/IGA (lifecycle management and governance), Access Management (authentication, federation, authorization), and Privileged Access Management (PAM) for highly privileged users and shared accounts, including password and session management. Because many IAM capabilities are now standardized or commoditized, successful products must interoperate via common standards such as SCIM, LDAP, Kerberos/RADIUS/PKI/FIDO/WebAuthn, OAuth/OpenID Connect/SAML, and authorization standards including JWT, UMA, and XACML.

Access Management focuses on delivering user access to services and SSO, either through federation standards or—when legacy web apps lack federation—through techniques like password injection or modified HTTPS headers. It must span SaaS and legacy apps across hybrid IT, and still often requires on-premises deployments for B2E/B2B and some B2C scenarios tied to enterprise backends. Scalability and high availability are emphasized, especially for B2C peaks.

Atos DirX Access is described as a mature Access Management solution offering adaptive (risk- and context-aware) authentication, WAM, and federation, plus integrated User Behavior Analytics (UBA) and Dynamic Authorization Management via XACML. It supports on-premises, managed service, and cloud deployments, including multi-tenancy. Authentication factors and standards support is broad (e.g., X.509, OTP, an authenticator app, Windows Hello, FIDO2/WebAuthn) with policy-driven combinations. Session management includes context sharing, correlation across browsers, optional full session tracking, anomaly detection, step-up authentication, and session state sharing across servers. Federation features include SAML/OAuth/OIDC, SAML proxying, dynamic user provisioning, preconfigured SaaS profiles (e.g., Microsoft Office 365), and secure token transformation. Strengths highlight scalability (including IIoT), flexibility via REST APIs, and uncommon depth in dynamic authorization; challenges include a dated administrative UI, limited full IDaaS positioning, and low market visibility, with a modern responsive UI planned.

• IAM commonly consists of Identity Management (IGA), Access Management, and Privileged Access Management (PAM).
• Provisioning commonly uses SCIM, and user identity storage commonly uses LDAP.
• Federation standards listed include OAuth, OpenID, OpenID Connect (OIDC), and SAML.
• DirX Access supports adaptive authentication, Web Access Management, and identity federation.
• DirX Access includes User Behavior Analytics (UBA) capabilities in the context of adaptive authentication.
• DirX Access supports Dynamic Authorization Management based on XACML.
• DirX Access supports SAML v2.0, OAuth 2.0, and OpenID Connect.
• DirX Access supports SAML proxying for authentication flows across multiple identity providers.
• DirX Access can perform dynamic provisioning of users to target systems in combination with federation protocols.
• The current DirX Access release provides a traditional administrative UI, with a modern responsive UI planned for the next release.

• “IAM is a foundational element of cybersecurity today.”
• “Access Management… is focused on providing access for users to services.”
• “They can deliver a SSO (Single Sign-On) experience to users, by authenticating the users on behalf of the target applications.”
• “A specific requirement for all types of Access Management is scalability and high availability.”
• “DirX Access is a feature-rich solution for Access Management, supporting Adaptive Authentication including risk- and context-aware authentication.”
• “A security session is created for each user.”
• “Based on that information, DirX Access can identify anomalies in user behavior.”
• “That type of in-depth integration support is rarely found in Access Management solutions.”
• “Performance is, generally speaking, a main theme within DirX Access.”
• “DirX Access is an Access Management solution that is very worth closer examination, specifically in complex or large scale deployments in the enterprise and public sector market.”