Password Management for Enterprises

Password Management for Enterprises
Password management in the enterprise is too important to be handled via an Excel document. In this article, we present six password management solutions for teams, companies, and external employees that can be used to securely store and share encrypted credentials. Either from the cloud or for local installation in the company.

Password management for enterprises

For security-conscious private users, a password manager for managing secure passwords for online accounts and applications is now part of the basic equipment. Many businesses would like to have a similar solution, especially if it is easy to use and even easier to maintain. However, one quickly stumbles into a feature trap here: What does my password safe have to be able to do? Is it enough to provide access data in a shared Excel document (or an appropriate web-based counterpart) for teams?

Or, at the other extreme, should it be an SSO solution that integrates with the company’s directory service? For this post, we’ve opted for the middle ground: we’re talking about password management solutions that store credentials securely and encrypted but bring additional functionality for working in teams.

First, there’s LastPass Enterprise, the enterprise version of the cloud password manager. All the functions of the end customer solution are integrated, plus additional features that specifically address enterprise use. These include user management and integration with directory services such as LDAP or Active Directory. As in the “normal” version, users can share individual passwords with other LastPass users, who can then use them within their own LastPass installation. LastPass Enterprise costs $24 per year and up.

READ:  What is a Honeypot Operation in Cybersecurity?

Dashlane is a cloud-based alternative to LastPass that works similarly in many ways. But here, passwords are not decrypted online but always on the end devices. The centralized admin console gives companies the ability to manage credentials centrally. This includes, for example, the ability to view the security rating for each employee, so that targeted work can be done to improve security policies.

In addition, new employees can be quickly added to the company and access can be blocked if they leave the team or the company. Dashlane strictly separates privately collected data from professional information. The cost structure is similar to LastPass, starting at about $24 per year per user.

Those who don’t trust the cloud should take a look at Password Depot’s server module. This is installed on a Windows server, and clients can then connect to it directly. The Password Depot 9 server costs 139 euros for six users.

An alternative is the TeamPasswortManager . This web-based solution is relatively easy to install, requiring only Apache, PHP, MySQL and IonCube. Integration with directory services is also available here. The actual administration is then done via a web interface. Here, not only can passwords be imported – for example from a CSV file or from KeePass – but also groups can be created that are to have access to the various passwords. The license costs from 99 dollars from five users.

READ:  Keeping Outgoing Network Traffic Under Control in macOS

Also of interest is the Enterprise Edition of Password Safe. This is also operated locally in the company. The solution does not have to hide when it comes to functions: a client/server architecture is also on board, as is integration into the Active Directory. The sealing system is clever. This protects important data records from individual access.

Either a justification must be stored or several users must approve access to the information. This is also integrated into the approval system. The basic software can be extended with additional modules, including Network Logon, support for Citrix or terminal servers and a workflow system. The basic version without additional extensions and support costs 960 euros.

If you’re more into the high price range, you should take a look at Password Manager Pro. All identities can be stored in a centralized virtual safe. The respective users have access to this, and they can also pass on the access data to other team members. The function for automatically resetting passwords is interesting, as is the control of access to systems.

If desired, access to privileged systems and user accounts can be recorded via audio and video to guarantee complete documentation of really important accounts. The enterprise version starts at ten administrators (and unlimited users) and costs $2995.

READ:  What is Code Injection?