Entrust GetAccess™

1 Entrust GetAccess Your Digital Life Should be SecuredYou enable the digital lives of your stakeholders through increased access toinformation and services. With increased access to information and service comes the need for security. Whether it is banking, working or shopping online, the EntrustGetAccess solution can provide a rich consolidated platform for securing your digitallife and the lives of your customers, partners and employees who are accessing your Web portal. You need to secure your customers identities and their transactions onlinebecause it helps you become more competitive. You need to secure your businesspartners and suppliers identities because they want to automate their businessprocesses to increase productivity and efficiencies, and you need to secure yourincreasingly mobile employees because it can help you reduce overall costs.

2 Secureaccess to digital content, data and services online defines your digital GetAccess AdvantagesA Web portal is a single doorway for employees, customers and partners to accessdigital content, data and services online. Creating a personalized online experienceat the portal depends on authenticating your users and then acting according to that individual's assigned role and authority. The Entrust GetAccess solutionemploys XACML-based policies to enhance role-based access controls (RBAC) and restrict access to portal resources based on context-sensitive policies. EntrustGetAccess capabilities can provide you with the security, flexibility and performancethat are required to personalize the user experience of a Web portal and help youto lower cost and increase your Digital Life and the lives of your shareholders is at least in part a function of legislative and regulatory compliance.

3 By facilitating access to digital content, data and services, for your employees, customers and partners youendeavor to comply with corporate policies and governance. The Entrust GetAccesssolution provides granular policy controls for fine grained control over resourceaccess and detailed logging capabilities to track user access and policy execution. Entrust GetAccess Identity Federation enables integration of user experienceand business process across your organizational allows controlled portability of identity and entitlementsto allow you and your stakeholders to weave togetherbusiness and process components to form a richer end userexperience.

4 The Entrust GetAccess solution provides integralinteroperable identity federation capabilities employingSAML or SAML Services can be provided with the Entrust GetAccesssolution. The Entrust GetAccess product can be enhanced torespond as a SAML identity, attribute, and authorizationauthority for SOA through tight integration with EntrustSecure Transaction Provider Identification & EntitlementsServers. When deployed in this configuration, ServiceOriented Architectures (SOAs) can leverage the EntrustGetAccess capabilities for centralized authentication,authorization and policy large-scale deployments supporting millions ofpages, dozens of applications, hundreds of Web servers,and millions of users have already been achieved withEntrust GetAccess.

5 Entrust GetAccess services can bedistributed across any number of servers to speed responsetimes and provide continuous availability for your customersaround the globe. Entrust GetAccess employs a scalablehigh performance architecture to power many multi-millionuser without sacrificing security means yourstakeholders can use their digital life without feelingfrustrated with Web portal downtime issues. However,performance without security can put their digital life atrisk. The Entrust GetAccess solution can be used toimplement strong security features, such as centralized session management, FIPS 140-2 validated cryptofunctions, and multi-domain Single Sign-Off to preserve the security of your life broad range of authentication methods enables you to be flexible with your customers and partners given thelevel of security required for each type of user.

6 The EntrustGetAccess solution has a wide selection of authenticationmethods which can help you to balance the level of securitywith the cost and complexity of deployment using any ofthe following authentication options: Username & password External LDAP repository Browser Certificates ( ) Entrust IdentityGuard Entrust USB Tokens Microsoft Integrated Login Microsoft Windows Domain Authentication SAML Identity Assertions Entrust TruePass Microsoft .NET Passport Smart cards and/or other USB tokensEntrust GetAccess ArchitectureEntrust GetAccess employs a two-tier architecture, providinga thin runtime agent to intercept identification and resourceaccess requests at the Web Server, and a scalable ServicesOriented server architecture to manage authentication andauthorization processing.

7 The Entrust GetAccess Server hasautomated service discovery, integral fail-over and fail-backcapabilities, and flexible multi-level centralized 1: Entrust GetAccess ArchitectureEntrust GetAccess Integration InformationWeb Browsers Microsoft Internet Explorer, Netscape CommunicatorPlatform Support Web Server Runtimes Microsoft Windows 2000, 2003: Microsoft InternetInformation Server, SunONE/iPlanet, Apache, ApacheReverse Proxy, Lotus Domino, IBM HTTP Server Solaris: Apache, Apache Reverse Proxy, IBM HTTP Server,Lotus Domino, Oracle, SunONE/iPlanet Linux: Apache, Apache Reverse Proxy HP-UX [Q1 2004]: Apache, Apache Reverse Proxy, IBMHTTP Server, Oracle, SunONE/iPlanet AIX: Apache, Apache Reverse Proxy, IBM HTTP Server,Lotus DominoPlatform Support Back-end Services Microsoft Windows 2000, 2003, SolarisDirectory Repository Microsoft Active Directory (incl.)

8 ADAM), SunONE/iPlanetLDAP, Microsoft SQL, Oracle RDBMS, Novell NDS/eDirectory, Siemens DirXDirectory Authentication SunONE/iPlanet, Oracle OID, Microsoft Active Directory,Novell NDS/eDirectory, Siemens DirX, CriticalPathApplication Servers IBM WebSphere, BEA WebLogic, Microsoft .NET, Oracle,Allaire Cold FusionPortal Servers IBM, BEA, Sun ONE, OracleAuthorization Features Policies, APIs for legacy/non-Web apps, APIs for customapps, affiliate services security management, SSO,identification monitoring, wireless supportStandards Support SAML, XACML, LDAP, OCSP, SSL, SOAP, XML, SPMLID Method Entrust TruePass , Microsoft.

9 NET Passport,UserID/Password, Random Number Token, browsercertificates ( ), Microsoft Integrated Login,Microsoft Windows Domain, SAML Assertion, Safeword,Smart Cards/USB Tokens, Custom Methods, SecondFactor Authentication/Mobile ID Server More InformationFor more information on how Entrust GetAccess can deliver Web portal security, flexibility and performance toenhance your Digital Life and that of your stakeholders,contact the Entrust representative in your area or call: 888-690-2424 or visit EntrustEntrust, Inc. [NASDAQ: ENTU] is a world-leader in securing digital identities and information. Over 1,400 enterprises and government agenciesin more than 50 countries rely on Entrust solutions to help secure the digital lives of their citizens, customers, employees and partners.

10 Ourproven software and services help customers achieve regulatory and corporate compliance, while turning security challenges such as identitytheft and e-mail security into business opportunities. For more information on how Entrust can secure your digital life, please call us at 888-690-2424, or send an e-mail to Visit us on the Web at is a registered trademark of Entrust , Inc. in the United States and certain other countries. In Canada, Entrust is a registered trademark of Entrust Limited. All other Entrust product namesand service names are trademarks or registered trademarks of Entrust , Inc. or Entrust Limited in certain countries.