Symantec VIP Multi-factor Authentication: Overview

Prev Next

Multi-factor Authentication and Need for Greater Login Security

Multi-factor authentication adds a second layer of security to an application login by requiring an additional piece of information unique to the user. As more and more employees work remotely and an increasing number of contractors, customers, and staff requiring access to company applications and data, secure access has become more important than ever.

Symantec Validation and ID Protection Service (VIP) is a powerful authentication service providing robust two-factor authentication via software-based soft tokens. While RSA SecurID hardware token authentication is still an option, Ripple Treasury believes Symantec VIP offers significant advantages and cost savings for a majority of our clients.

Clients using RSA and those considering an authentication solution are encouraged to contact us after reviewing this document to discuss enrolling in Symantec VIP.

Symantec VIP Login Process

Symantec VIP uses a software-generated authorization code and works similarly to RSA:

KN - Symantec - Login Process Diagram.png

Please note that Symantec VIP works with both traditional Web logins as well as Single Sign On (SSO). For more information on SSO, please see Ripple Treasury Fact Sheet – Single Sign On.

Symantec VIP vs. RSA SecurID

Symantec provides a number of advantages over traditional RSA SecurID authentication:

  • Symantec soft tokens are nearly 60% less expensive, leading to lower long-term costs.

  • No more physical tokens. Authentication is provided by a downloadable credential application supported by all major smartphone platforms without any additional hardware. Software tokens eliminate the following issues present with physical tokens:

o Logistical management issues, particularly for large organizations, especially those operating in multiple countries.

o Interruption of work due to loss, theft, defective hardware, premature battery failure, damage, or expiration after three years, then additional time waiting for a replacement unit – Symantec VIP tokens may be renewed remotely when needed without interruption of service.

  • RSA servers use a proprietary database engine. Symantec uses lightweight and stateless servers, resulting in lower ongoing maintenance costs.

  • Symantec is much more flexible in terms of integrating functionality within the Ripple Treasury application. This means we can potentially accommodate client-specific requests on timeouts.

Please contact us to further discuss transitioning to Symantec VIP.