Password synchronization
Password synchronization is defined as any process or technology that helps users to maintain a single password that is subject to a single security policy, and changes on a single schedule across multiple systems.
Password synchronization is an effective mechanism for addressing password management problems on an enterprise network:
- Users with synchronized passwords tend to remember their passwords.
- Simpler password management means that users make significantly fewer password-related calls to the help desk.
- Users with just one or two passwords are much less likely to write down their passwords.
Password synchronization is much easier to implement and is more effective against password management problems than enterprise single sign-on (SSO), as there is no client software deployment, and user enrollment can be automated. There is also no single, critical point of failure in a password synchronization system, as the system is not involved in user sign-on processes.
Two types of password synchronization processes are commonly available in commercial software:
- Transparent password synchronization, triggered by a password change on an existing system. The new password is automatically forwarded to other user objects that belong to the same user, on other systems (of the same or different types).
- Web-based password synchronization, initiated by the user with a web browser, in place of the existing native password change process. The web-based process allows the user to set multiple passwords at once.
Password synchronization is a type of Identity management software.