SAFsolution 5 Enterprise Edition

Biometric Support

Supports over 40 biometric fingerprint readers from different manufacturers including most laptops and tablets with integrated readers.

Support for Bio-API standard enables BSP middleware integration with Bio-API compliant biometric services providers (BSPs).

Common fingerprint template format is interoperable among supported reader devices. Enables users to enroll with one reader and authenticate with any other supported reader.

Bio-API framework enables ability to add-in new biometric methods.

Administration

New Administrative Roles framework separates admin tasks into 4 internally managed groups: Helpdesk Agents, Enrollment Agents, Policy Administrators and Roles Administrators.

Administration may be linked to native AD security groups such as Domain Admins or assigned to users and groups created to manage SAFsolution.

Policies applied to Containers are inherited by child objects and can be overridden at lower levels in the AD hierarchy if desired.

Policy Viewer provides quick access to view policy values configured on any AD object.

Security

Integrated Certicom Suite B cryptography toolkit protects all user credentials and configuration settings stored in the directory and locally on client workstations.

Uses AES 256bit encryption.

Global deployment ID and password protects configuration and deployment keys.

Elliptical Curve Cryptography (ECC) protects certificates and keys.

Client/server communications secured via TLS-encrypted SSL channel.

Deployment

Simple deployment tool manages global deployment configuration settings.

In multi-domain AD Forests, SAFsolution may be deployed to one or more domains.

As the AD Forest grows, SAFsolution can be deployed and enabled on new domains.

Multiple SAFsolution servers can be deployed as required for performance and server redundancy.

Windows Active Directory
ADAM (optional)