RTL Group chooses Evidian Enterprise SSO to secure user access in its holding company
The media company RTL Group has chosen Evidian Enterprise SSO single sign-on software. The software solution was first deployed in its holding company to secure user access; 600 employees and journalists in RTL Group’s Luxembourg site now access their applications easily and securely after a single authentication via Evidian’s software.
The RTL Group holding company supervises the activities of its affiliates in 57 countries. To comply with regulations, the IT department decided to enforce strict security best practices, especially for password complexity. However, these measures were a threat to employee productivity, with 20% of hot line calls due to forgotten passwords.
“SSO is an easy way to educate users in computer security. It makes their daily life easier while reinforcing access control and storing access history” said Rémi Prime, IT Security Officer and head of the project, RTL Group.
RTL Group pre-selected five SSO solutions ranked as leaders in Gartner’s Magic Quadrant. After features analysis, three of them were tested thoroughly. RTL Group concluded that the Evidian solution was the most suited to their needs.
"We appreciated how easy it is to install and use Evidian Enterprise SSO, and total acquisition cost fitted our budget. Our infrastructure is not altered and integrating new applications is easy. Finally, in functional terms, only Evidian met all of our requirements" added Rémi Prime.
In particular, Enterprise SSO provides account delegation, offline password reset and traceability of accesses. Additionally, the software implements the password policy of RTL Group without having to modify the applications involved.
After a successful deployment, some sensitive applications will require strong authentication: password coupled with a physical medium. Enterprise SSO is compatible with most media types (USB key, smart card, RFID chip, etc.). Thus, RTL Group may select an authentication media without constraint from the SSO application.
"We now enforce a strict segregation of duties for IT persons working with financial applications. None of the administrators knows the password for the systems he or she manages: they require Enterprise SSO for access, which allows us to trace all their activities" concluded Rémi Prime who considers that security and usability are inseparable. “At first, some users thought that the SSO would not help them, but now they can’t do without it."