Scorpion Software Blog

Federation without the fuss for Microsoft Office 365

September 24^th, 2012 Chilliwack, BC – Scorpion Software announces the first strong, fully independent two-factor authentication and single sign-on solution for Office 365.

“Microsoft takes security seriously,” says Scorpion Software CEO Dana Epp. “But to get maximum security, companies need to protect the keys to the front door – the passwords people use to get in.”

Passwords are frail and vulnerable to human error. In the last year, major companies like Yahoo, LinkedIn, eHarmony, and Dropbox leaked millions of passwords. Because most people use the same password in a number of different places, just one stolen password could allow an intruder to access critical information stored in other Cloud services that may be used for work.

“AuthAnvil for Office 365 adds strong authentication and identity assurance, all while simplifying the user experience,” says Epp. “It eliminates the need to remember passwords, and allows users to login once to securely access all their email and business documents stored in the Cloud, from virtually any device.”

How does it work?

It’s simple really. Instead of using a static password that can be shared, stolen or easily guessed, users sign in once through two-factor authentication. With AuthAnvil, staff input a chosen PIN (what they know), and then a one-time password generated from an app on their smartphone (what they have). It’s similar to a bank card: they provide a card (what they have) and input a PIN (what they know). Essentially, they offer two factors to authenticate who they are to gain access. From there, staff can access everything without having to know a password.

“It doesn’t matter if a business is an enterprise bank or a small architect firm,” says Epp. “Every business needs to ensure that only the right people can get to their sensitive data in the Cloud. AuthAnvil for Office 365 is designed so that any size of company can easily implement stronger access security.”

What makes AuthAnvil different?

Microsoft offers federated single sign-on (SSO) to enterprise businesses, and uses ADFS and DirSync – a complex system that requires extra servers and many hours or days to implement.

AuthAnvil for Office 365 enhances businesses of all sizes, including the small business P1 and P2 plans, because of its direct federation capability to Microsoft’s Cloud Services. It helps companies save time and money because it works in minutes, not days – it doesn’t require extra software and server resources for ADFS or DirSync, or the time to implement them.

“Usually security and usability are at odds,” says Epp. “What’s great about AuthAnvil for Office 365 is that it actually simplifies how staff access Office 365. They can login once from anywhere, on almost any device, and get secure access to the Cloud. We’re excited to be able to make this available to all our customers who want simple, secure access to Office 365.”

AuthAnvil Single Sign On is now free

AuthAnvil for Office 365 combines the strong identity assurance of AuthAnvil Two Factor Auth and the work efficiency of AuthAnvil Single Sign On. To assist all our customers in securing a cost-effective solution, we are pleased to announce that AuthAnvil Single Sign On is now free with AuthAnvil Two Factor Auth. As of September 2012, all existing and future customers will receive the benefits of both products at $5/month or less per user.

Media contact:
Heather Murray
1-888-407-4285 ext.722
heather@scorpionsoft.com

Stay up-to-date with the latest advantages for AuthAnvil Single Sign On

September 10, 2012 Chilliwack, BC – AuthAnvil Single Sign On offers more benefits now than ever before, including additional user features and integrated applications.

“It’s important for us to keep improving our software,” says Scorpion Software CEO Dana Epp. “Our goal is to solve the obvious problems with passwords that others ignore, and that includes the risk and pain of having to log in and out of applications all day long. We solved that with AuthAnvil Single Sign On, and made it even easier to use with version 3.5.”

Instead of staff logging in and out of applications as they need them, they can login once through AuthAnvil Single Sign On, and then gain secure access to all their applications as they need them without having to enter another password.

Benefits of the latest release of AuthAnvil Single Sign On help improve the user experience:

• We have expanded our application catalog to include built-in support for Outlook Web Access, Office 365, Zendesk, and WordPress, allowing your staff to quickly and securely access these popular applications with very little extra configuration. 
• Users now have full control over the SSO portal layout, allowing them to prioritize their most-used applications and customize their personal experience.

“AuthAnvil Single Sign On increases staff efficiency while also improving company security,” says Steve Syfuhs, Microsoft Security MVP and lead AuthAnvil Single Sign On developer. “Staff spend less time logging in during their workday, have fewer passwords to remember, and login securely with two factors of authentication.”

The latest edition – AuthAnvil Single Sign On version 3.5 – is available for both new and existing customers. All they need to do is download the AuthAnvil Single Sign On 3.5 upgrade and install it to take advantage of the recently-developed features.

Aren’t already using AuthAnvil Single Sign On? Learn more about AuthAnvil Single Sign On and how it saves time while increasing security.

Scorpion Software Announces full AuthAnvil Password Solutions integration with Kaseya Solution

FOR IMMEDIATE RELEASE

Chilliwack, BC: July 17, 2012 - Scorpion Software Announces full AuthAnvil Password Solutions integration with Kaseya® Solution.

Scorpion Software presents the only password management tools that are fully integrated with Kaseya®. Through a single pane of glass within the Kaseya Management Console, Scorpion Software enables fully integrated password management, two-factor authentication, and single sign-on capabilities.

"Kaseya is designed with security in mind, but every system is only as strong as its password management," says Scorpion Software CEO Dana Epp. "Our partnership with Kaseya allows users to strengthen their security by keeping a close eye on employees and consultants that know critical passwords, and what they're doing with them."

All it would take is one tech with bad habits to give up a password, and suddenly an adversary could have access to all the customer systems being managed via Kaseya that a company may be responsible for.  Data, records, credit card information, and more could be exposed, costing money, trust, and time to fix it – perhaps even a court case.

"IT professionals are responsible for their clients’ system security," said Jeff Keyes,  senior product marketing manager, Kaseya. "They owe it to themselves and their customers to use the strongest possible security on their management system. Using two-factor authentication and enforcing password management are the best ways to truly give customers peace of mind about security."

AuthAnvil Password Solutions acts as a gatekeeper, ensuring that only the right people can access company information both on premise and in the cloud. Access points are barred from villains in three ways.

Firstly, with AuthAnvil Two-Factor Auth, users logon to Kaseya in a new way that goes beyond username and password. A third field, called a passcode, traces who they really are with a code nearly impossible to duplicate or forge. Users enter their own four-digit PIN, plus a one time, dynamically-generated password from an AuthAnvil token. It’s like having a bank card – there’s something users own (a SoftToken or HardToken) and something they know (their PIN). It’s a one-two punch that ensures the right person is accessing information.

Secondly, AuthAnvil Password Server provides security as a comprehensive password management system. Staff can generate extremely complex passwords that are nearly impossible to guess, securely store passwords so they don’t have to remember them, automate synchronization and password updates, and choose who has access to which passwords.

Best of all, it's easy to create audit reports in the password server  – authorized users can report on who has access to which passwords, and when they were accessed. To revoke access, it’s as simple as a click of a button. This capability is crucial when a staff member leaves, or when a breach of security is suspected. Basically, it allows companies to discover culprits quickly and irrefutably, and prevent problems from happening in the first place.

"One of the key benefits of integrated password management and access control," says Epp, "is identity assurance. Now every Kaseya user is traceable and authenticated; you have confidence that they are who they say they are, and they can only access what you let them see."

Thirdly, AuthAnvil Single Sign On is now transparently integrated into Kaseya. When users logon to Kaseya with their passcode, there’s no need to logon to the AuthAnvil Password Server separately. It now appears as an integrated tab in the Kaseya Management Console.

This is the only software of its kind that fully integrates directly into the Kaseya Management Console. With AuthAnvil Password Solutions, Kaseya users can get the highest possible security features, preventing outsiders and even insiders from wreaking havoc with sensitive company information.

To learn more about AuthAnvil’s secure password protection options and how they integrate seamlessly with Kaseya, please visit www.scorpionsoft.com/kaseya.


About Scorpion Software
Scorpion Software solves the obvious problems with passwords that others ignore. We provide robust password management, two-factor authentication (2FA) and single sign-on (SSO) solutions for IT Service Providers and IT departments of small to midsized businesses worldwide. Headquartered in British Columbia, Canada, Scorpion Software helps businesses manage online risk while offering unprecedented password protection. More information about the company is available at www.scorpionsoft.com.

Scorpion Software is pleased to announce the release of a new version of AuthAnvil Password Server (v1.5)

For immediate release:

Chilliwack, BC: June 22, 2012 - Scorpion Software is pleased to announce the release of a new version of AuthAnvil Password Server (v1.5).

This latest version is loaded with new features, productivity and UI enhancements as well as a refresh to the product name. “We listen to what our customers want, and what they want to see more of,” says Scorpion Software CEO Dana Epp. “And they want tools to streamline and better organize their passwords.”

New features such as no-touch RDP connection capabilities from within a “Vault” and the ability to star passwords as favorites for easy one click access have been added. And in an industry first, third party certificates for custom integration within the AuthAnvil Password Server have also been added in this release. Now Scorpion Software partners can programmatically access sensitive credentials on demand as required.

Also of note, the product name has been upgraded to “AuthAnvil Password Server” to better reflect the full capabilities of the solution. “It’s a comprehensive solution, not just a ‘vault’ to store passwords,” says Epp. “We help you securely manage your passwords. We sync them, audit who uses them and when, and automate how they’re managed.”

Current users are encouraged to download the free upgrade of AuthAnvil Password Server. To learn more about this product and our other AuthAnvil Password Solutions, please visit www.scorpionsoft.com.

 

About Scorpion Software

Scorpion Software solves the obvious problems with passwords that others ignore. They provide robust password management, two-factor authentication (2FA) and single sign-on (SSO) solutions for IT Service Providers and IT departments of small to midsized businesses worldwide. Headquartered in British Columbia, Canada, Scorpion Software helps businesses manage online risk while offering unprecedented password protection. More information about the company is available at www.scorpionsoft.com.

 

AuthAnvil SoftToken for the Nintendo Game Boy

Scorpion Software announces the AuthAnvil SoftToken for the Nintendo Game Boy.

In addition to supporting all the latest Smartphone, tablet and other mobile devices on the market, AuthAnvil SoftTokens are now available for Nintendo’s popular Game Boy platform. “With over 100 million of these devices out in the wild, it only made sense to make our product available for this highly popular platform”, said Dana Epp, CEO. Now you can generate one-time passwords just as easily as the regular version of the SoftToken. Just insert the AuthAnvil cartridge into your official Nintendo Game Boy device and power it on. Press START to get your one-time password, simple as that!

An added feature of the AuthAnvil Game Boy SoftToken is that it is built on top of the popular Tetris platform. There is no need to swap cartridges when you want to play Tetris and need the security of two factor authentication at the same time. You can get your one-time password them jump right into a Tetris game seamlessly. If you find yourself committed to a game of Tetris and you require an additional one-time password, you can simply access AuthAnvil from the pause screen, so your game remains uninterrupted.

The AuthAnvil Game Boy SoftTokens will be available in packs of five from our online store. Pricing and availability will be released in the coming weeks.

 

Oh, and happy April Fool’s Day, stay tuned for our regularly scheduled Blog post on Monday morning!

 

Scorpion Software Announces AuthAnvil Single Sign On Support for Level Platforms Managed Workplace

For immediate release:

Chilliwack, BC: February 6, 2012 - Scorpion Software, an industry leader in strong authentication and password management solutions for IT Service Providers and IT departments is pleased to announce integrated support for AuthAnvil Password Solutions with Level Platforms, a global leader in remote monitoring and management (RMM) solutions for managed service providers (MSPs). Scorpion Software’s AuthAnvil Single Sign On will provide direct access to Level Platforms Managed Workplace without needing to know or enter a traditional password.

“Working with Scorpion Software, we are adding significant value for MSPs deploying our Managed Workplace platform,” said Peter Sandiford, CEO, Level Platforms. “Integrating Scorpion Software’s expertise in access control and credential management, Managed Workplace 2012 will allow MSPs to quickly and easily access web-based resources while still ensuring the highest level of data protection and integrity for their customers.”      

AuthAnvil Single Sign On makes it possible to sign in once with a strong credential provided by AuthAnvil Two Factor Auth, and then gain access to web based applications without even having to enter a password, or know where to login in the first place. A single click, and they’re in. This ensured the highest level of security while making it easier for MSPs to access their most critical web based resources like their PSA and RMM toolsets.

“With AuthAnvil Password Solutions, we make it possible for IT Service Providers to gain secure access to their most vital resources both on-premise and in the cloud. Add to that centralized password management and sophisticated audit controls, we are pleased to work with Level Platforms as one of the first RMM players to embrace better credential access and management for this industry,” said Dana Epp, President and CEO, Scorpion Software.

You can learn more about this solution at www.scorpionsoft.com/levelplatforms. In addition, Scorpion Software is participating in the Level Platforms Managed Services Education and Collaboration Road Show. The day-and-a-half event features top MSPs sharing winning strategies and best practices, educational panels delivering the latest industry intelligence, and the launch of Managed Workplace 2012. For complete information visit http://www.levelplatforms.com/Mailout/LPI-in-Events/RoadShow2012.aspx

 

About Scorpion Software

Scorpion Software solves the obvious problems with passwords that others ignore. They provide robust password management, two-factor authentication (2FA) and single sign-on (SSO) solutions for IT Service Providers and IT departments of small to midsized businesses worldwide. Headquartered in British Columbia, Canada, Scorpion Software helps businesses manage online risk while offering unprecedented password protection. More information about the company is available at www.scorpionsoft.com.

About Level Platforms

Level Platforms provides Managed Workplace®, the remote monitoring and management software and services platform used by thousands of IT service providers around the world to deliver comprehensive IT support to small and midsized businesses. Level Platforms’ hybrid agentless technology, extensive management and automation features, deep integration into the IT ecosystem and fully integrated white label support services, allow IT services providers to remotely support all of the information technology products and services their end customers rely on from a single web-based dashboard. “See All. Manage All. Service All.” For more information, visit www.levelplatforms.com.

Level Platforms Expands Security and Authentication Options with AuthAnvil

One of the mandates here at Scorpion Software is to ensure we provide appropriate protection for the IT Service Providers out there that manage so many of the SMBs in the space. Especially when they are acting as MSPs, automating much of the IT administration through the integration of powerful RMM tools. And we have been doing that with several RMM platforms for years. There is just so much risk and liability (like what we talked about yesterday), and the growing service providers are continuing to see the liability and lack of accountability when techs change roles, or leave the organization. And it gets worse as you consider the needs to meet compliance objectives such as PCI, HIPAA and SOX.

Last month we quietly released the AuthAnvil Management Pack for Level Platforms to meet the needs of several leading MSPs who use both our AuthAnvil solution and Level Platform's Managed Workplace 2011. The key driver of this project would have to be Dave Sobel over at Evolve Technologies, who has been a customer for a while now and who just couldn't wait to see the two platforms work together. As he mentioned in the recent Level Platform press release on the subject:

"Bringing AuthAnvil and Level Platforms together brings us the best in security and monitoring," says Dave Sobel, CEO of Evolve Technologies, an LPI partner. "We now can not only protect our customers with strong two-factor authentication, we can protect our own management environment, ensuring that data integrity and security of our customers. Two factor authentication protects our customers, our staff, and our mutual interests. I'm excited about this new set of capabilities, and how we'll secure our customers."

I'd like to really thank Dave for spearheading this. We've always wanted an opportunity to work with a fellow Canadian company like Level Platforms to deliver our solutions for our mutual customers. It takes the right business opportunity for all parties concerned to make it happen. When that happened last month, everything fell together quite quickly. Managed Workspace 2011 was easy to code to. The team at Level Platforms were great to work with. This really was a perfect example of a 'better together' solution that just makes sense for IT service providers everywhere.

So if you are client who is using Managed Workplace 2011, what are you waiting for? Head over to our documentation library and check out our new Level Platforms integration.

Update to AuthAnvil Credential Provider allows for streamlined access on Windows Server 2008 R2

Long title. And a long time coming. Great news for our customers who are using Windows Server 2008 R2. Over the last year we have been working with Microsoft on a change that they made in the server OS that prevented our agent from working at its full potential like how it worked in Windows Server 2008 previously. A change in how they manage remote login credentials in an RDP session made it impossible to collect the stored or pre-entered credentials using network level authentication (NLA), basically making you enter the credentials twice... which really isn't the best user experience when trying to use Microsoft's RD RemoteApp technology, or even a standard remote desktop connection.

Over time, we have been able to help them get to the bottom of this, and came up with a solution that will NOT require further changes to the operating system, and only required a small change to our agent.

Which gets us to today's post. This body of work is now available for download in our latest agent. You can download the newest version of the AuthAnvil Credential Provider (v3.6.0.5) in the download section in the Customer Portal, which completely fixes this behaviour, giving you full support for AuthAnvil passcodes in RD Gateway and RD RemoteApp using passed in credentials.

Many thanks to the escalation team at Microsoft and their internal support and dev teams who have helped us to find a solution that was safe, that made sense, and was practical. And many thanks to our customers for being patient and letting us fix this properly, rather than to rush out an interm hotfix for the issue in Windows Server.

Along with being able to download the new installer, we include an MSI so you can push out the fix using Active Directory Software Distribution Policies, or through your favorite RMM tool like System Center or Kaseya. If you need assistance in automating the deployment of this new agent, please open a case in the Customer Portal. We would be happy to help!

Dana Epp Honored in Third-Annual MSPmentor 250 Report

Well isn't this interesting. Apparently I have landed on Nine Lives Media Inc.’s third-annual MSPmentor 250, a global report that identifies the world’s leading managed services executives, entrepreneurs, experts, coaches and community leaders.

I'm grouped with many thought leaders that I admire and respect highly in the managed services industry. Customers, partners and fellow visionaries in the vendor space who are helping to make all MSPs more profitable. I am truly honored. Many thanks to Amy and Joe over at Nine Lives Media and to all our customers, partners and friends who have nominated me. I appreciate being recognized in this way, and thank you all.

So where do we go from here? Well many of you, as our customers, continue to ask for more integration between systems. With our support currently for everything from Autotask, ConnectWise, Kaseya, and LabTech it makes sense to carry that further. The MSPMentor 250 list truly is a rolodex of some of the brightest minds in the MSP industry. I think its time I personally call many on the list who we aren't working with yet to explore how we can work together to further the MSP space, and ultimately reduce your business liability while increasing your productivity and profitability.

MSPMentor 249... look forward to my call.

AuthAnvil is now integrated into Autotask!

Have you heard? Autotask announced today that they have now integrated AuthAnvil into their IT business management platform. The result is an additional layer of security to compliment the safeguards in Autotask to offer identity assurance protection for your users when accessing the sensitive customer data stored there. You will gain confidence in knowing who is actually requesting such access to Autotask, and have a definitive method to audit and control all this through two-factor authentication.

And of course, you can use this same token to also log onto your favorite RMM tools like Kaseya and LabTech, as well as the Windows servers and desktops that you manage.

If you would like to learn more, go check out www.scorpionsoft.com/autotask/.

We are pleased to see Autotask complement its existing security infrastructure with AuthAnvil. The robust nature of AuthAnvil not only protects the critical information stored in Autotask users’ systems, that protection crosses over to their IT automation systems and secures remote access to client networks they manage. This is a perfect example of a better-together solution that truly benefits the IT community at large.

Way to go Autotask!