Authentication & Authorization
It’s not just Who You Are that matters.
It is What You Are that matters, too.
CyberSolve implements capabilities for your organization to properly authenticate entities and grant them only the needed authorization to access your systems, data, and applications. Proper Authentication will control the point of access while well planned Authorization will enforce the rules of what can be done post the granting of access.
Authentication Management
The process of Authentication requires a subject successfully providing valid credentials to satisfy the access requirements of an application, service, or system to which the subject is trying to access. The addition of single sign-on (SSO) technologies allow for the centralization and/or the reduction of these authentication mechanisms in such a manner that multiple applications, services, and systems may rely on a central store for authentication or provides for synchronization of a subject’s credentials in order to limit the number of credentials per user, thus improving the end-user experience. Multi-Factor Authentication (MFA) should be considered to additionally secure assets through the requirement to provide two or more verification factors to gain access to a resource (often online applications, elevated privilege account accesses, VPNs, and/or mission critical services and systems).
AUTHENTICATION PROTOCOLS
Standards which prescribe how to present an authenticated subject; includes Kerberos, SAML / Liberty, WS-*, OAuth, LDAP, and application-specific standards, such as Windows NTLM.
VERIFICATION AND VALIDATION
Mechanisms to verify a subject’s credentials and provide a level of assurance as to the validity of the credential; also concerned with authentication policies and password policies.
CREDENTIAL LIFECYCLE MANAGEMENT
Concerned with creation of credentials and the management of the credential lifecycle.
Authorization Management
As an access control, Information Technology systems and applications typically have their own implementation for authorization management or allow for the utilization of a centralized management engine (such as Azure or on-premises Active Directory (AD) Groups). This means that a user or entity has an account for each system/application used and each system/application has its own permission structure and method of permission assignment.
RESOURCE IDENTIFICATION AND MANAGEMENT
Provides for centralized inventorying, labeling, and general management of IT assets.
ATTRIBUTE BASED AUTHORIZATION
Provides for granting resource access to a specific user to granting access based on the value of a user or entity’s attributes. While user authentication is still required, the access is no longer granted via a specific Access Control List (ACL). Instead, at the point of authentication a decision is made based on the value of specific attributes whether or not access should be granted.
ROLE-BASED AUTHORIZATION
Provides for modeling of access to IT assets based on information about the user, e.g. department, job function, location, etc., to automate access provisioning and validate the appropriateness of entitlements that are granted.
POLICY-BASED AUTHORIZATION
Provides a service for consolidating security decisions traditionally hard-coded in disparate applications into an external, centrally-managed and audited repository, allowing applications to focus on business logic and outsource authorization management in a repeatable, consistent way. Policy may be based on rules utilizing Attribute values across multiple, disparate sources.
USER/ENTITY MAPPING
Supports the assignment of users/entities to entitlements or sets of entitlements, e.g. roles. One user/entity can be mapped to multiple entitlement sets as required.
PERIODIC AUTHORIZATION REVIEW
Processing of periodically reviewing access granted to users by managers and application owners as part of a Governance, Risk & Compliance (GRC) program.
Todd is a recognized IAM and Cloud industry expert who brings over 20 years of experience in managing, advising, architecting, and deploying IGA, Authentication and Authorization, and Cloud solutions and services across IDaaS, SaaS, IaaS, and PaaS. Todd is a frequent speaker on effective risk and security practices at leading industry events. He is responsible for the oversight of CyberSolve’s business segments and for the development of strategic plans to sustain the company’s rapid growth while providing trusted advice to clients across the security and risk spectrum.
Atul has over 20 years of experience in managing, designing and implementing Customer Relationship Management (CRM) and Salesforce integrations. He has acted as a cloud-focused solutions expert in both domestic and international markets. Prior to founding CyberSolve, Atul was a Technical Consulting Director at Salesforce where he demonstrated his strong experience architecting financial services industry solutions. Atul holds a Bachelor of Engineering from Madan Mohan Malaviya University of Technology.
Shub possesses over 15 years of experience in the Identity and Access Management (IAM) industry in pre-Sales and technology architecture roles. Shubham has held various positions with SailPoint, RSA, Saviynt, and Okta. He has extensive Identity and Access Management industry technology and sales experience in both domestic and international markets as well strong knowledge of how Identity and Access Management satisfies Audit and IT compliance issues. Shub holds a 
Rajesh has served Multi-National Corporations and large organizations as a full time Vice President of Finance, Chief Financial Officer and in equivalent roles. In order to fulfill his duties as a CFO he is a Chartered Accountant, holds a Diploma in Information System Audit (DISA certified by the Institute of Chartered Accountants of India), is a Certified SAP Consultant, Certified QuickBooks Professional Advisor, and Zoho Partner with 30+ years of experience in managing Finance, Accounting and ERP Systems for Medium to Large organizations in diverse sectors.
John is an experienced IT executive with extensive business leadership, operations management, project management, technology delivery and consulting skills who spent over two decades with General Electric where he was responsible for all aspects of their Global PIM program, he was also a key member of the security assurance team for the organizations Capital business. John leads the delivery of client services across the business landscape, to include Privileged Access Management, Managed Services, Identity Governance & Administration, Cybersecurity and Cloud Services.
Luis has been facilitating IAM programs for 20+ years. He was the CRO at Clear Skye, which builds identity governance capabilities on the ServiceNow Platform. His prior experience with services companies that deliver real world identity solutions has made him a trusted resource for information security executives that he has the privilege of advising. Luis assists in the management of our global sales organization, driving revenue growth via direct sales, ensuring our customers have the best plan and solution to ensure their IAM investment achieves the lowest TCO while providing the highest ROI.
Amit brings over 15 years of Identity and Access Management (IAM) experience to the organization. He has a proven track record in providing customers with the best of breed Identity and Access Management solutions. He ensures success within all engagements by staying integrated with the customer throughout the engagement whether it is a program, project or managed services and support. Amit acts as a customer champion at all times to ensure the right solution and resources are in place to achieve the right requirements.
James leads the delivery of client services across the Identity, Access, and Authorization landscape. He has delivered projects across a wide range of products including Okta, Ping, ForgeRock, Oracle, Microsoft, Citrix, Imprivata, Radiant Logic, Axiomatics and many others. With the advent of modern cloud services, James has served as the internal cloud architect and administrator for almost 10 years and uses that experience to help users make the best use of it.
As a veteran of the Identity Governance and Administration (IGA) landscape, Tony’s career has spanned from being a hands-on Architect\Engineer on numerous industry-leading IGA solutions to building and managing industry-leading Professional Services delivery teams. Tony brings that vast knowledge to CyberSolve and the teams under his management. In recent years Tony has been instrumental in the migration away from the legacy on-prem Identity Governance & Administration solutions to modern cost-effective cloud products.
Clark is a Channels, Sales and Marketing executive with 40+ years of experience as a direct seller, Executive and Founder. His experience includes services, software and hardware sales to Commercial, Federal, and State/Local/Education entities across US Domestic and International markets. Within the IAM spectrum, Clark spent over 5 years as SailPoint’s Channel Manager, Federal & Healthcare markets. He has developed and managed Partner relationships and strategies globally, and is known for significantly growing the revenue of his partners by building trusted, profitable relationships and business strategies.