Key Benefits
- Strengthen security and reduce operational risk through delegated administration, separation of duties and granular access control, enabling enforcement of least-access privilege.
- Dramatically improve compliance by providing a single, unified identity services architecture to enforce security across Windows, UNIX and Linux systems and applications while also enabling enterprise-wide user-session auditing and reporting.
- Reduce costs and increase productivity with a single solution for unified identity and privilege management across the data center, cloud and mobile.
Advantages Over sudo and Other Existing Products
- All privileges and policies are associated with specific, centrally managed identities in Active Directory, providing a unified identity management solution. Sudo and other privilege management tools replicate identity information on local systems, or try to store it scripts or databases that may have little or no integration with Active Directory.
- A graphical user interface makes creating roles and rights far easier compared to scripting complex sudo policy files or learning other solutions' proprietary scripting languages that cannot match the rich group-based modeling available in Active Directory.
- Centrally and securely apply and report on policies from Active Directory, as opposed to trying to manage config files on individual systems.
- Unique ability to control users' access to secured systems via PAM-enabled applications and interfaces (SSH, FTP, etc.).
- Unique Restricted Environment feature provides the option to restrict users to a "whitelist" of specific commands, compared to older, cumbersome and error-prone solutions that permit all actions except those that are put on a "deny" list.
- Simplifies users' workflow, enabling them to execute commands with privilege without having to change accounts, remember additional passwords, or learn new commands.
Part of an Integrated Solution for Unified Identity Services
The Centrify Suite provides Unified Identity Services for workstations, on-premise and cloud-based servers across UNIX, Linux, Windows and Mac OS by leveraging your existing identity infrastructure investment — Microsoft Active Directory. With Centrify Suite organizations gain control and establish visibility across heterogeneous systems through integrated authentication and single sign-on, policy management and authorization, auditing and analytics and server isolation and encryption. Built as a single architecture, Centrify Suite — consisting of DirectControl, DirectAuthorize, DirectAudit, DirectSecure and DirectManage — allows organizations to improve operational efficiency and strengthen security and compliance by consolidating islands of identity and centrally managing privilege and policy.
