Print this Page
2.2 Service Level
12. Service Authentication
Close this Page

2.2.12 Service Authentication:
We are in a position to help our customers to manage their user profiles and keep the application safe from expired sign in rights.   By providing an automated email and by expiring the sign in profile of users who are not actively using application services, the security of the service is improved.

Competition:
While Microsoft, Amazon and Salesforce are Application Service Providers, they are not able to deliver the same high quality application services that we provide.   We are in a unique position to be able to help our customers with monitoring and user administration services that may not be practical for our competitors.

User Profile:
A three tier architecture is deployed to store user authentication data as:
Group as branch office, site, department or any other natural grouping of users.
User Profile with timezone, language, currency and many application specific field values.
Sign In Profile with the specific authentication details such as ISP, hours of the day and days of the week when sign in is permitted.

Management:
Users are grouped so one or more managers can be assigned to each group with responsibility to add and change user data within their group.
Each user may change their own user profile, but can only view their sign in profile.
Each manager may change any user profile or sign in profile within their own group and may add new users.

Monitoring:
For security reasons, it is important that when a user leaves, their manager changes the users sign in profile so they cannot sign in.   This can best be done by selecting "No Days" as the days of the week when they can sign in.

Automation:
Where a user has not signed in during the last 22 days, they are sent an automatic email to inform them that their sign in will be automatically disabled in 10 days time.   The user may sign in before the expiry date to perpetuate their sign in rights.
The users sign in profile is expired by changing their sign in permitted days to "No Days".   The users manager may reset the users sign in profile from "No Days" to "Mon to Fri" or "Mon to Sun".