Usercube

Why Usercube

Usercube responds to delegated administration in two ways:

1. By offering to non-technical users a simple and comprehensive web interface enabling them to manage access rights for a group of users.
2. By introducing an "area of responsibility" which gives maximum flexibility in organizing the roles which are managed by delegated administrators.

Functional Interface

Usercube screens do not use technical terms to make them understandable by any users of the company. Any action is part of a business workflow and authorizes e-mail validation without having to open the web page.

Business Workflows

All Usercube actions are monitored by a workflow engine which gives the following benefits:

• Ability to configure as many steps as necessary (by default, workflows are configured with two steps: request and approval)
• Homogeneous traceability
• Persistency of actions and traces

RBAC and Much More

The security model provided by Usercube defines for every administrators a multi-dimensional "are of responsibility". This "area" enables to implement classical RBAC but also to setup dynamic groups of users including their roles, location or their title, without multiplying RBAC rules.

Provisioning and Synchronization

Usercube offers a provisioning and synchronization mechanism of accounts within the enterprise network. Credentials modifications made through the interface or automatically are pushed in the systems and applications repositories, such as Active Directory, Unix servers, RDBMS or business apps.

Usercube can also detect when a modification was made directly in the system and triggers a reconciliation process.

SaaS Compatibility

Usercube can also provision accounts in the Cloud, such as e-mail systems or CRM. The generic connector can connect to any application if it is not in already available.

Other Applications

Applications which do not have APIs for provisioning or those for which the cost of integration is to high are not forgotten. Usercube has a "manual connector" to liaise with the application's owner. This connector offers the same delegation and workflow features than automatic connectors.

Reports

Usercube brings multiple reports in addition to interactive lists. These reports offer to control authentications, credentials and segregation of duties. This simplifies the setup of corrective actions while measuring data quality.

Customization

Every report template is customizable in Excel. Therefore, the sonly skills requires are Excel's to adapt graphical charter, layout and choose data formats.

It is also possible to add specific data and compliance rules.

White and Yellow Pages

Usercube offers corporate directories features to search and view people information and display them like within a white or yellow pages directory.

Usercube also displays graphical orgcharts for people, sites and groups.

Password Management

Usercube enables central management of passwords and offers self-service features like forgotten password challenge-response, password change or password reset by someone else.

Usercube integrates with SSO products to add password provisioning and password self-service when they are missing.

Corporate Directory

• People and groups search and display
• Hierarchical orgcharts
• Search according different criteria: organization, geo, hierarchy or groups
• Field level filtering and visibility status
• Integration in the browser search field

Self-Service

• Display of your own data
• Request for changing its own data
• Request for changing its own credentials
• Password reset
• Follow-up of requests

Delegated Administration

• Definition of delegated administrators with specific "areas of responsibility"
• People life cycle management (arrival, departures, changes...)
• Segregation of duties. Management of roles for a user (using sites, managers, teams, organizations...)
• Groups and group-members life cycle management
• Follow-up of requests and pending actions
• E-mail integration of workflows. Notifications by e-mail. Workflow approvals directly within the e-mail.
• All logs are signed, optionally with a physical token

Reports

• Phone lists
• Roles for every users
• Metrics and lists for every user
• Workflow audit trails

Multi-Language Interface