Tomcat Single Sign-On (SSO), Multi-Factor Authentication (MFA), SAML, OpenID, OAuth, Audit

Once the user is connected to Evidian, connections to Tomcat applications are transparent.

Passwords and authorizations are dynamically provided by Evidian for each application.

Single Sign-On eliminates user frustration inherent to multiple logins or password changes, and thus increases user productivity.

Evidian supports a large list of authenticators. They are implemented transparently to Tomcat and they cover:

• Tomcat MFA (Multi-Factor Authentication)
• Tomcat SSPR (Self-Service Password Reset)
• Tomcat OTP, TOTP, smart card, etc
• Tomcat Fido
• Tomcat SAML, OpenID, OAuth

Evidian provides a complete offer for SAML, OpenID and OAuth that can be configured as Identity Provider (IdP) and as Service Provider (SP).

Without any modification, unsecured Tomcat applications can be transparently protected by SAML assertions, OpenID tokens or OAuth tokens.

Evidian collects data and produces mandatory Tomcat audit reports for regulatory compliance (SOX, GDPR, HIPAA, Basel III, PCI, etc).