TriCipher and Bennington-Rutland Supervisory Union

TriCipher, Inc. provides identity and access management technologies in the cloud. TriCipher's myOneLogin is the only identity services platform that gives each user a future-proof identity and never-compromised credentials federated to thousands of applications.

The Bennington-Rutland Supervisory Union provides central leadership and support for nine different school districts within the state of Vermont. Teachers, staff, board members, parents, community members and administrators work together to utilize resources equitably and effectively, to foster high performance and success for all students.

Challenge

The Bennington-Rutland Supervisory Union (BRSU) in Vermont is embracing cloud computing. Students and staff alike use Google Apps for Education, and staff use other Software-as-a-Service (SaaS) applications for the educational market, including content management systems with wikis and blogs.

In his role as superintendent of the Bennington-Rutland Supervisory Union (BRSU), Daniel French has championed Google Apps and SaaS within the member school districts. According to French, "Once you start using Google Apps, it really opens the doors to using other software-as-a-service applications, which are a great fit for educational districts."

As the district increased its reliance on cloud-based applications, it needed to secure and simplify access to those applications for teachers and staff. Says French, "We worried about controlling access when storing sensitive student information in online applications. I wanted to add better access security through strong authentication."

Solution

French found TriCipher's myOneLogin Secure Single Sign-On on the Google Apps Marketplace. myOneLogin provides a single, secure login for all web-based applications, using federation to offer tight integration with Google Apps.

Using myOneLogin, BRSU can set up a single sign-on portal providing secure access to Google Apps and other applications, including Vana Workforce, Zoho, iObservation, MyLearningPlan, BrainHoney, and SchoolFusion.

Access to the portal is protected with TriCipher's patented split-key authentication, which deflects phishing and password attacks.

BRSU uses roles-based access controls within the myOneLogin service to create and deploy distinct sets of web applications for different roles within the school district teachers and staff.

Results

After evaluating the 30-day free trial, BRSU deployed myOneLogin Secure Single Sign-On for staff throughout its school districts, as part of a broader roll-out of several new SaaS applications through the district.

Using myOneLogin delivers benefits on two fronts for the BRSU:

• The union can easily deploy web applications to a distributed staff throughout several school districts by simply adding applications to defined roles in myOneLogin. The new applications then appear on the myOneLogin portal for users filling that role.
• TriCipher's patented strong authentication alleviates concerns about password-only access to accounts containing sensitive student information.

TriCipher and St. Michael's RC School

TriCipher, Inc. provides strong authentication and identity management technologies to protect web applications and enterprise portals, the people that use them, and the business processes that flow through them against fraud and identity theft. The myOneLogin service from TriCipher combines strong authentication, single sign-on and federation as an on-demand service.

TriCipher and eModeration

TriCipher, Inc. provides strong authentication and identity management technologies to protect web applications and enterprise portals, the people that use them and the business processes that flow through them against fraud and identity theft. The myOneLogin service from TriCipher combines strong authentication, single sign-on and federation as an on-demand service.

eModeration was founded in 2002, and is a leading international provider of outsourced multilingual community management and user generated content moderation services for US Fortune 500 and top UK based content providers. It works with agencies and clients to protect brands and users from the risks associated with user generated content, and its community management team helps brands to build happy and thriving social media communities. eModeration also moderates and manages children’s virtual worlds and MMOGs.

Challenge

eModeration is a modern, virtual organization, with offices in London, New York and Los Angeles, and expert moderators around the globe. Its entire business is conducted on the web, from moderating its clients' social media sites to collaborating and managing projects. The company uses Google Apps for mail, documents and calendars, and applications like QuickBase and Basecamp for data collection and project management.

With every employee relying on dozens of accounts, the problem of managing account access is significant. For eModeration, the challenge was two-fold:

• Passwords for its own applications: eModeration needed to access shared business applications like Google Apps and Basecamp.
• Accounts on its clients' sites: eModeration also gives its moderators access to accounts on the clients' social media sites, and must protect those logins carefully.

Solution

myOneLogin provides secure single sign-on to eModeration's various web applications, with tight integration to Google Apps Premier Edition. Using myOneLogin, eModeration can distribute online applications to employees and consultants based on their project needs, without having to distribute the actual accounts and passwords.

eModeration often needs employees to share access to specific accounts. For example, a Google Apps account may be linked to a specific project or client rather than an individual user. Using myOneLogin, eModeration's users can have more than one Gmail account available on their myOneLogin page, and gain easy, single-click login without hunting down the right password.

Results

myOneLogin offers secure single sign-on to the company's web applications, including Google Apps. All accounts are protected by multi-factor authentication.

In addition, eModeration is using myOneLogin to access customer website accounts for moderation. The moderator for the project does not need to know the password to access the customer site. myOneLogin adds another layer of security to eModeration's trusted services.

"We take security and privacy very seriously, and work hard to earn and maintain our customers' trust," said Tamara Littleton, founder and CEO of eModeration and member of the Home Office Internet Taskforce for Child Protection on the Internet. "With its strong authentication and centralized control, myOneLogin adds a layer of security to our services, as well as our daily operations. It helps us maintain our trusted relationships with our clients."

TriCipher and Awana

TriCipher, Inc. provides strong authentication and identity management technologies to protect web applications and enterprise portals, the people that use them and the business processes that flow through them against fraud and identity theft. The myOneLogin service from TriCipher combines strong authentication, single sign-on and federation as an on-demand service.

Awana has been a leader in children's and youth ministry for nearly 60 years. Awana is the only organization with fully integrated evangelism and discipleship programs for ages 2 to 18 that actively involve parents, church leaders and mentors. Each week, more than a million children and youth, 250,000 volunteers and 300-plus field staff take part in Awana in over 17,000 churches in the U.S. and internationally.

Challenge
Like many nonprofits that are watching their costs, Awana decided that the most cost-effective way to manage their computing needs was to use web-based applications and software-as-a-service. According to Michael Litz, Manager of Networking and Computer Services for Awana, "We'd like to put everything in the cloud, and use other people's infrastructure rather than maintaining our own."

When Awana decided to move from in-house Microsoft Exchange to Google Apps including Gmail for mail, the issue of lost and forgotten passwords had to be addressed. Not only would Gmail represent one more account and password to manage, but password sharing was a concern. Some individuals wanted to be able to delegate the ability to check their email inbox to an assistant. Awana wanted to enable email delegation without sharing the actual accounts and passwords.

Solution
Awana found myOneLogin on the Google Solutions Marketplace. myOneLogin offers tight integration with Google Apps using SAML-based federation. By enabling the SSO option within Google Apps, Awana can ensure that users only connect to Google Apps using myOneLogin. This means that their Google Apps accounts are now protected with the strong, two-factor authentication provided by myOneLogin.

myOneLogin also solved the problem with delegated inboxes. Using myOneLogin, it is possible to give an individual access to an application without actually giving them the password.

Results

Awana included myOneLogin as part of the Google Apps rollout; to access their email, users needed to use myOneLogin. Awana also added to the portal the other applications used by the organization, including Salesforce, Citrix, Aetna, and many others. Says Litz, "Once people started using myOneLogin they saw how convenient it was for accessing all of their web applications. In this case, seeing is believing."

Today Awana's users can access all of their web applications easily, no matter where they are. Help desk calls for password resets are a thing of the past, as are calls asking how to access specific applications and URLs. Using myOneLogin and web-based applications lets Awana focus on its core mission, rather than maintaining and supporting on-premise applications.

TriCipher and Spence-Chapin Services

TriCipher, Inc. provides strong authentication technologies on demand or on premise to protect web applications and enterprise portals, the people that use them and the business processes that flow through them against fraud and identity theft. The myOneLogin service from TriCipher combines strong authentication, single sign-on and federation as an on-demand service.

Spence-Chapin is an accredited, nonprofit agency offering adoption services, whose origins go back to 1908. Since that time, the agency has placed over 18,000 children with families. Based in New York City, Spence-Chapin has branch offices in Long Island and New Jersey, as well as a thrift shop in Manhattan.

Challenge

Like many businesses, Spence-Chapin used a blend of in-house applications and web-based applications, including Google Apps and Salesforce. As the agency expanded its commitment to web applications, it took a careful look at how it managed access to those web-based applications.  Says Jamie Mumin, Manager of Information Technology for Spence-Chapin, “We were worried about protecting access to our client and fundraising information. We wanted to add strong authentication to reduce concerns about moving data to the web.”

Spence-Chapin tried using an SSL VPN using tokens for strong authentication.  But the token strategy was difficult to implement in this environment.  According to Mumin, “We quickly realized that distributing the tokens and training people to use them was not going to work for us. So we started looking for alternatives that would support Salesforce and Google Apps."

Solution

Spence-Chapin now uses myOneLogin to give its diverse user community strong authentication to Google Apps, Salesforce, and its other web-based applications.  myOneLogin delivers multi-factor authentication without the cost and complexity of tokens.

Spence-Chapin’s users range from program coordinators who visit overseas countries to the social workers working with families locally. All are focused on the children, not the technology.  Spence-Chapin deployed the myOneLogin solution to its entire user community in a day. According to Mumin, “The fact that it is web-based is a tremendous help – people are familiar with the web, and they find myOneLogin easy to use.”

Result

Spence-Chapin’s users now connect to their web-based applications using myOneLogin. This helps the agency protect the access to applications with strong authentication.  The users find it easy and reliable, and have been adding applications to their myOneLogin portal.

Says Mumin, “myOneLogin has saved us thousands of dollars that we don’t have to spend deploying tokens. It’s easy to use and it works 100% of the time. If we were using another strong authentication method, we would be handling more technical support calls.”

TriCipher and Ferrilli Information Group

TriCipher, Inc. provides strong authentication and identity management technologies to protect web applications and enterprise portals, the people that use them, and the business processes that flow through them against fraud and identity theft. The myOneLogin service from TriCipher combines strong authentication, single sign-on and federation as an on-demand service.

Ferrilli Information Group (FIG) is a consulting services organization serving both private and public four-year universities and community colleges. FIG provides tailored IT services including hardware and software selection, project management of ERP/administrative software implementation, legacy migration, strategic planning, and IT leadership management.

Challenges

After doubling in size for two years, Ferrilli Information Group was outgrowing its internal software infrastructure. Founder and CEO Robert Ferrilli decided to move to Software-as-a-Service (SaaS) applications to run the company’s business and support the employees working with college and university clients around the US. The business selected a dozen online applications to replace internal systems, including Google Apps for collaboration and email.

Moving to SaaS brought unexpected complexity. Employees had 12 different accounts and passwords to manage. They called in frequently for help accessing resources. Says Ferrilli, “New employees were confused, and we had a hard time getting staff to use new applications because they were difficult to access. Instead of managing internal servers, we were fielding calls for application access.”

Solution

While exploring single sign-on solutions for Google Apps and Salesforce, Ferrilli found myOneLogin Secure Single Sign-On from TriCipher. myOneLogin creates a single web application portal, combining strong authentication and single-sign on for web applications.

FIG uses myOneLogin as a single portal for accessing its SaaS applications, including Google Apps, Salesforce, timesheet software, payroll services, and other applications. The administrator creates the accounts and sets the passwords, so individuals do not even need to know the accounts and passwords for the various business applications they use.

Results

myOneLogin gives FIG's employes a great way to communicate through a common desktop. New applications simply appear on employees’ virtual desktops, so utilization and adoption is no longer an issue. And by adding links to internal directories and project schedules to the myOneLogin desktop, the business can easily share strategic resources with its distributed employees.

Says Ferrilli, “Our users love it. I get unsolicited kudos for implementing myOneLogin."

Ferilli continues, "myOneLogin is not just about having single sign-on, it’s about providing a single portal with all of the key information and applications our users need. To the end users, it’s seamless. To me, it’s priceless.”

TriCipher and Motion Media Solutions

TriCipher, Inc. provides strong authentication technologies on demand or on premise to protect web applications and enterprise portals, the people that use them and the business processes that flow through them against fraud and identity theft. The myOneLogin service from TriCipher combines strong authentication, single sign-on and federation as an on-demand service.

Motion Media Solutions is a new media video production agency supporting corporations and non-profit organizations, foundations and small businesses. The Dallas-based agency provides creative solutions to help clients effectively communicate for fundraising, training, promoting, archiving and distribution.

Challenge

As a small but growing agency, Motion Media Solutions needs to focus its time and resources on working with its customers and developing creative content – not on application maintenance and management. As the company grew, founder and CEO Ross Mason made the strategic decision to move to SaaS applications to run the business. Says Mason, “We only want to own those applications that are core to our business, such as video editing software. For everything else, we want to use web applications wherever possible.”

Motion Media Solutions decided to use Google Apps for its documents, presentation software, and corporate email. The company already used Salesforce, and wanted to adopt other SaaS applications for project management, human resources, and other business operations. However, Mason worried about how all of the applications would work together. According to Mason, “We already had more than enough user names and logins to manage. I worried about the time lost managing passwords and making everything work together as we increased the use of SaaS.”

Solution

Motion Media Solutions uses myOneLogin Secure Single Sign-On to create a virtual online desktop of the web-based applications the business uses. myOneLogin combines strong authentication with single sign-on for web-based applications, including Google Apps and Salesforce. Delivered as a service, it supports Motion Media Solutions’ SaaS strategy.

Using the SaaS model together with myOneLogin gives Motion Media Solutions enormous flexibility and efficiency. According to Mason, “I can log in wherever I am, on any computer, and be productive. When my laptop died, it was a great relief to know that almost everything I have created or use was online and available to me while the laptop was being repaired.”

Result

myOneLogin uses strong authentication to protect the login from phishing, man-in-the-middle attacks, and other forms of password theft and fraud. myOneLogin also improves overall security by giving the business better control over access to accounts. Using myOneLogin, Motion Media Solutions’ employees can log in just once to access all of their web-based applications. Says Mason, “Using myOneLogin definitely saves us time and allows me to be more efficient. We sometimes hire young people for short-term projects. We don’t have to worry about ‘locking them out’ of accounts when they leave, which gives me peace of mind and saves a lot of time.”

TriCipher and Maker SA

TriCipher, Inc. provides strong authentication technologies on demand or on premise to protect web applications and enterprise portals, the people that use them and the business processes that flow through them against fraud and identity theft. The myOneLogin service from TriCipher combines strong authentication, single sign-on and federation as an on-demand service.

Maker SA is the second largest digital printing business in Paraguay, specializing in low-volume, fast turnaround printing jobs. The company offers a range of printing services to businesses and individuals, from digital color printing and photocopying to wedding invitations.

Challenge

Maker needs to communicate reliably and securely between its branches to handle the growing number of email-submitted print jobs it receives, and to manage its distributed business. After a disappointing experience with a hosted service provider, Maker decided to move to Google Apps for email (Gmail) and other business applications (Google Docs, Google Calendar and Google Sites).

In addition to the power and convenience of Google's web-based applications, TriCipher's myOneLogin solution provides an extra level of security through a second layer of authentication. This met Maker SA's need for added protection against account password theft or sharing.

Solution

Maker learned of the myOneLogin solution on the Google Marketplace. myOneLogin Secure Single Sign-On combines single login across web applications with strong authentication. myOneLogin is an in-the-cloud service from TriCipher, experts in strong authentication based in Silicon Valley. The myOneLogin service is hosted in secure, redundant data centers. When users connect to myOneLogin using an account and password, an additional authentication credential is exchanged in the background. Once authenticated, myOnelogin connects the user transparently to their web applications.

This strong authentication in place protects Maker’s accounts from password theft or sharing. Even if someone were to gain access to the myOneLogin account and password, they cannot connect to the Google accounts without the additional credential.

Result

Maker now uses myOneLogin to connect to its Google applications, combining the convenience of anytime, anywhere access with the peace of mind that strong authentication provides. Using myOneLogin is as easy as entering an account and password; additional credentials are exchanged online, behind the scenes. myOneLogin is tightly integrated with Google using federation standards, so authentication is seamless and secure.

“The Internet channel is the future of our business, and we are increasing our use of online software like Google Apps,” says Gimenez. “I feel safer now knowing that we have protected those accounts with myOneLogin.”