Entrust

Release 3.0

Service Provider portal (AAAS-2692) (AAAS-4633)

Those with access can now use the Service Provider portal to perform managerial functions on other IntelliTrust accounts. Key uses cases include being able to unlock accounts, delete accounts that are no longer in use, and track account activity metrics for financial purposes. Those logged in to IntelliTrust as a Service Provider can also access the Administrator and User portal features made available by their assigned role.

Risk-based authentication (RBA) (AAAS-3041)

Risk-based authentication (RBA) identifies the level of risk a user represents at each authentication attempt. A user's level of risk is used to define the authentication level required to access IntelliTrust or an application. The feature is useful for those situations where account owners want those seeking access to be immediately accepted, given an extra authentication challenge, or rejected based on their apparent level of risk. The resource rules within each account dictate which risk tests are performed on each user when they attempt to authenticate.The resource rules also dictate what authentication challenges must be performed based on the RBA test results.

Mobile smart credentials available for authentication (AAAS-3831)

Administrators can now use Entrust Datacard's Mobile Smart Credential (MSC) application to authenticate to their IntelliTrust account. Users can use the application to authenticate to IntelliTrust through push authentication or Windows Smart Card Logon (SCLO). A MSC requires access to a configured CA and smart credential definition to be activated.

Internationalization (AAAS-2229)

Users accessing their IntelliTrust account can now change the language of the descriptive text in their IntelliTrust account from their user portal. Account level language changes can be made from the Customization section on the administrator portal.

On-Demand directory synchronization prompt (AAAS-1689)

Administrators can now request the immediate resynchronization of a directory from their account's Directories page. Selecting the On-Demand Sync button forces a directory re-crawl operation, updating your IntelliTrust account with the latest information located on your corporate directory.

Specify SAML assertion/response signing algorithm (AAAS-6784)

Administrators must now select the type of signing algorithm IntelliTrust uses to sign SAML response/assertions to an application when configuring a SAML application for IntelliTrust authentication.

Download account or authentication activity reports (AAAS-7157)

Activity reports can be downloaded from the My Activity or Reports pages. A user can download a copy of their Detailed User Authentication Activity from the My Activity page on the User portal. Users with access can download any Account Audit Event report generated for a selected date range from the Reports page on the Administrator portal. Both reports are downloaded in .CSV file format.