Sapho Introduces Consolidated Identity System

Sapho, an employee experience portal designed for the digital workplace, is unveiling its patent-pending Consolidated Identity system, simplifying employee authentication systems.

This technology, created by Sapho co-founder and CTO Peter Yared, represents the next generation of Yared’s Federated Identity innovation.

Enterprise employees need to access multiple applications on a daily basis to do their jobs, and single sign-on is no longer enough, said Yared. Consolidated identity is changing how employees do their work by inheriting the authentication, authorization, and data governance policies of the individual applications to allow employees to access data and complete tasks in a single interface, he explained.

Federated identity is based on a loose trust model between an individual’s identity provider account and the services of a service provider – in essence, it puts a “firewall” between the authentication provider and the services provider.

Because of this loose trust model, federated identity is very challenged in enterprise environments. Consolidated identity changes this paradigm as it assumes a high trust network, where the enterprise itself is the identity provider.

This prevents the need for identity separation—“the firewall”—between the identity provider and the service provider. This is because service providers, which provide services, such as payroll and time off requests, do not hold any data that should not be privy to the enterprise.

 With consolidated identity, employees can access what they need from a variety of applications without having to go into each application separately.

The consolidated identity system makes this possible by aggregating the relevant data for each employee and their entitlements across both the identity provider and the applications. The resulting “identity graph” enables developers to create enterprise applications that offer employees a more engaging, customized user experience, while also providing tighter security through authentication, authorization, and data governance.

For more information about this solution, visit www.sapho.com.