Control Center needs the ability to pull account passwords from a corporate password manager/vault
Due to security requirements and best practices, passwords should be changed periodically and wherever possible, should not be stored on local systems in text/XML files, etc. Control Center should have an option to utilize external Password Vault ...
Currently we are required to use SEAS for LDAP authentication. However, using SEAS as any tool will add more resources to the worker pool. While deploying SEAS does not require a license, there is a cost involved in adding CPU and memory to SEAS P...
We have identified a security vulnerability regarding passwords being stored in plain text in the application.Despite the solution provided by IBM not being accepted by the application support team, they have recommended raising an RFE case.
...
Allow ICC to authenticate users via group membership (eg. using SEAS)
Typical enterprises do not define individual user accounts and groups to every application, as is currently required for ICC.Instead, user accounts and groups within an LDAP directory (such as Active Directory) are used and the applications recogn...
Control Center Certificate Expiration Warning Notification
The Certificate Expiration warning rule that comes with Control Center produces a warning if a Connect Direct Secure Plus certificate is going to expire within 60 days. However, there is no known notification for Control Center's certificate which...
I would like to see control center monitor use active directory as an authenticator vs just SQL authentication when connecting to a MSSQL database
For security reasons we don't use SQL Authentication for local accounts. We use domain service accounts. We would like to see the CC adopt this option for authentication.
As per Bank security team, Concurrent logins should not be allowed. If the user is login via different machines or different browsers then the old session should be destroyed. As per them, we need to have this feature in the product or commitment ...
Sterling Control Center should be able to interface directly with LDAP to authenticate without the addition of Sterling External Authentication Server.