WestLB AG

Realisation of the Security Policy with Single Sign-On

WestLB AG entered into a joint project with secunet which comprised various subsections. Important aspects included centralising the user management of the UNIX systems and setting up the single sign-on infrastructure. The objective: centrally managed and standardised implementation of the identity management policy on the systems. The use of a future-proof technology was a priority for the persons in charge at WestLB.

The administration of user identities is now centralised via the established Active Directory, in which the users’ Windows accounts are managed. This makes it possible to set up users and assign rights as well as block or delete them with greater speed and flexibility. In addition, the new solution permits a separation of user management and UNIX system administration.

The main part of the project involved setting up protected and uncomplicated access to UNIX-based applications for well beyond 1,000 bank employees from various departments including IT. A single sign-on system is just the right solution in this case. By opting for Kerberos as a future-proof system, WestLB is implementing a solution which has a standardised protocol und which is supported by many operating systems (including Windows as well as many UNIX derivatives) and applications.

Authentication in the network is encrypted. This makes the transmission of passwords definitely a thing of the past.