Enterprise
!
Universal, Strong Authentication and Simple Sign On
TAKE CONTROL
Use Injector on employee-owned
smartphones to strengthen the security
of authentication across your
organization while employees enjoy
effortless logins.
Injector Enterprise supports logins to
any system with no client software to
deploy.
Manage corporate credentials centrally
with advanced authentication policies,
and instant de-provisioning.
TECHNICAL SPECS
Central Management of Employee Logins: Employees use their smartphones
to log in to any corporate system using policies that are centrally managed by
administrators. Employees authenticate to the phone via strong password or
biometric and the rest is handled automatically by the Injector smartphone app.
The End of Password Resets: Since employees won’t need to know their
corporate passwords, you will never have to do a password reset. Now you can
enforce long, random passwords for legacy systems.
Effortless Authentication to Anything: Injector will work with any existing
system, whether it is a computer login, a web site, or even unlocking a full-disk
encryption system at pre-boot. Employees simply tap, speak, or scan a QR code.
Strong, Universal Authentication: Use Injector to authenticate with any kind of
credential: static passwords, one-time-passwords (TOTP or HOTP), or public key
authentication (FIDO U2F). Enforce reauthentication (including biometric if
supported on the smartphone) to specific credentials.
Advanced Authentication Policies: Injector Enterprise offers advanced
authentication policies that can be applied on a per-credential and per-user basis.
These include biometric reauthentication, geo-fencing, password randomization,
automatic password changes, and instant de-provisioning.
Easy Deployment: Injector Enterprise Server is installed as a virtual appliance
and there is no client software to deploy. All the employees need is the Injector
smartphone app.
Increased Employee Satisfaction: Employees will enjoy effortless logins to
corporate systems, but they can also use Injector to manage their own personal
logins. Corporate and personal credentials can co-exist in the same application.
FIDO U2F On-Premises: Add strong, public key authentication to corporate web
logins using an on-premises FIDO U2F authentication server.
INJECTOR SMARTPHONE APP
iOS version 6.1 or greater
iPhone 4S or newer
Android version 4.3 or greater
BlackBerry OS 10.3 (native)
Bluetooth Smart required for use with
Injector device
One-time-passwords (RFC 6238 and 4226)
!
INJECTOR DEVICE
USB 2.0 Full Speed with Bluetooth Smart
HID and FIDO U2F Interfaces
FCC, RoHS Compliant
!
SYSTEM COMPATIBILITY
Windows, Mac OS, Linux
Any computer that supports USB
CONTACT
WEBSITE
password-injector.com
EMAIL
[email protected]
!
!
Enterprise
!
Feature Summary
•
Manage corporate credentials: Using a friendly web interface, administrators define corporate credential sets and policies
that get pushed to employee smartphones. Credential sets correspond to logins (Windows domain, VPN, web sites, etc.) and
can be enabled or disabled on a per-user basis.
•
Active Directory integration: Injector Enterprise uses Active Directory as the source of employee identities and it also
supports randomization and automatic password changes via Active Directory for Windows domain logins.
•
Geofencing: Restrict use of a corporate credential to a defined list of geofences. When this policy is used, the Injector app will
use the geolocation services of the smartphone to ensure that a login can only occur from authorized locations. For example,
you can specify that the VPN can only be logged into when at the office or at home.
•
Password randomization: Enforce new passwords to be automatically generated by Injector. Specify length and formation
rules to match the system password requirements.
•
Automatic password change: Have passwords automatically changed on a specified schedule without the employee having
to take any action.
•
Reauthentication: Require specific credentials to need reauthentication on the smartphone before it can be used to ensure
that the right user really is present and to enforce stronger protection for certain logins.
•
Biometric support: If the smartphone has biometric capabilities, you can allow the biometric to be used as the reauthentication
mechanism.
•
Windows 7/8, Mac OS/X, Linux automated login: Logins for Windows 7, 8, Mac OS/X, and Linux can be automated without
having to modify the system.
•
BitLocker: Full disk encryption systems such as Microsoft BitLocker run in a pre-OS environment. Since no software needs to
be installed for Injector to work, even these passwords can be automatically managed and sent to the system by Injector.
•
FIDO U2F: Injector Enterprise comes with a FIDO U2F authentication server that you can deploy on-premises. Easy integration
into your corporate web sites allows you to provide the best security for authentication using public key verification. Note: this
requires use of Chrome browser.
•
Backup and restore: Corporate credential sets can automatically be backed up in encrypted containers that are locked to the
user’s Injector password. If an employee loses her smartphone, she can be up and running fast with a simple restore of the
backup to the new smartphone.
SYSTEM COMPONENTS
•
•
•
Injector Enterprise Server deployed as a virtual
appliance
Injector app on employee-owned smartphones: iOS,
Android and BlackBerry native.
Injector USB device: Carry on keychain or use micro
form-factor.