Intranet Journal
The online resource for intranet professionals

Back to Article | Home | Discussion Board | Tutorials | Columns/Advice ]

Legacy Single Sign-On : A Competitive Analysis


Brien Posey

10/14/02

Go to page: 1  2  3 

Computer Associates

Computer Associates' single sign-on product is a member of the eTrust family, called eTrust Single Sign-on. eTrust is an impressive security offer that includes as many products as anti-virus, intrusion detection, user provisioning, PKI, firewall, VPN… The e-Trust Single Sign-On product functions on UNIX (AIX, HP-UX, and Solaris), Windows NT, and Windows 2000 servers. The product supports Windows 9x and Windows NT clients.

One of the best features of eTrust was the fact that it supports load balancing to help achieve scalability and high availability. Except Evidian, none of the other products that I reviewed in this paper offer load balancing. Unfortunately, no data was available on eTrust's largest real world deployment.

Another thing that Computer Associates had going for it was one of the lowest price tags. eTrust Single Sign-on costs $50 per user for blocks of 1000 user licenses. Computer Associates drops the price to a mere $35 per user if the licenses are purchased in blocks of 10,000.

eTrust Single Sign-on's biggest downfall was its lack of support for UNIX applications. The product only supports single sign-on for text based UNIX. These applications must not be running in X-Windows mode.

I was somewhat disappointed in Computer Associates' customer service department. Computer Associates refused to answer any of my questions about eTrust Single Sign-on. They told me that I would only be able to get my questions answered by going through an independent sales representative. Once I explained that I was simply doing a product review rather than attempting to purchase the product, the representative from Computer Associates refused to give me the name or number of a sales person. Fortunately, I was able to locate a dealer through the Internet who was very helpful in supplying me with the information for this paper.

Still another problem with he Computer Associates product is that it's difficult to deploy and requires lots of complex scripting. The Computer Associates Web site recommends hiring an entire team of developers to assist with product deployment.

PassGo

PassGo, from PassGo Technologies was previously a Symantec product. PassGo supports Windows NT, Windows 2000, and Solaris servers, along with the OS 390 mainframe. PassGo clients can run on Windows 9x, Windows XP, and Windows 2000. While PassGo's customer service department was first rate, the product left a lot to be desired.

The biggest problem with PassGo is that it doesn't do true single sign-on, but rather relies on password synchronization. Additionally, the product lacks any personalization features and doesn't have any support for UNIX clients. My personal feeling is that in a couple of years, PassGo might evolve into a more competitive security application, but presently lacks the maturity of some of the other existing products.

Summary of Findings

As you can see from my findings, each single sign-on product has its good and bad points. To help you to compare the various products and features more easily, I've created a table to guide you through the product feature sets. As there is a great deal of information to present, the table has been included on a separate page HERE.

Weighted Comparison

Although the table below outlines the good and bad points of each product, determining the best product isn't as simple as counting to see which product has the most points. The reason for this is that some features are more important than others and therefore disserve stronger consideration. The chart below is a weighted comparison of the products based on which features are the most important. In this analysis, each product has been given between one and five points for each area of comparison, with five representing the highest possible score. The product's score in each area is multiplied by its weight to determine the total number of points for the feature. At the end, all of the points are tallied together to determine a summary chart.

Weight

Feature Value

Novell

 

Evidian

 

IBM

 

CA

PassGo

 

(Default)

Points

 

 

 

 

 

 

 

 

Weight x Score = Value

1 to 5

5 is Best

1 to 5

5 is Best

1 to 5

5 is Best

1 to 5

5 is Best

1 to 5

5 is Best

 

Value

50

Security

4 (200 Points)

5 (250 Points)

3 (150 Points)

4 (200 Points)

1 (50 Points)

 

(50x5=250 possible points)

 

 

 

 

 

 

 

 

 

 

 

 

20

Ease of Deployment

5 (100 Points)

5 (100 Points)

1 (20 Points)

2 (40 Points)

4 (80 Points)

 

(20x5=100 possible points)

 

 

 

 

 

 

 

 

 

 

 

 

20

Scalability

5 (100 Points)

5 (100 Points)

3 (60 Points)

5 (100 Points)

3 (60 Points)

 

(20x5=100 possible points)

 

 

 

 

 

 

 

 

 

 

 

 

10

Cost for a 5,000 User Organization

$395,000

$300,000

377,000

$250,000

$180,000

 

 

 

 

(single Server)

 

(single server)

 

(10x5=50 possible points)

3 (30 Points)

4 (40 Points)

3 (30 Points)

5 (50 Points)

5 (50 Points)

 

 

 

 

 

 

 

100%

Total Value of Possible Points=500

430 Points

490 Points

260 Points

390 Points

240 Points

As you can see from the weighted comparison, Evidian has come out on top, with Novell in a strong second place. IBM and PassGo were at the bottom of the list.

In summary, the final scoring indicated the below results:

Vendor and Product Name

Summary Scoring

Novell

420

Evidian Access Master

490

IBM

260

Computer Associates

390

PassGo

240

The graph below helps to illustrate how much higher Evidian scored than its competitors.

[]

Figure 4: Bar Chart of Legacy Single Sign-On Product Capabilities

Whichever legacy single sign-on product you end up selecting for your organization, don't forget to tally in the cost of implementation and support, which together reflect the total cost of ownership.


Copyright 2002 Relevant Technologies, Inc. All rights reserved. This may not be published in a magazine, journal, newspaper, or on a Web site without prior permission. Making photocopies and electronic copies of this document are acceptable for educational purposes.

Go to page: 1  2  3 



Back to Article | Home | Discussion Board | Tutorials | Columns/Advice ]

Copyright 2002 Jupitermedia Corporation, All Rights Reserved.
Legal Notices | Licensing, Reprints, & Permissions | Privacy Policy | Advertising on Intranet Journal
Home | eXchange | F A Q | Find | Register |