NMAS is included as a bundled product with OpenText eDirectory. The software image includes the following:
NMAS server software
Login methods software
Support for multiple login methods per login sequence
Support for graded authentication
Universal Password
NMAS client software is available with the OpenText Client for Windows and with OpenText SecureLogin.
NMAS server-side software is installed with OpenText eDirectory by default. NMAS client-side software must be installed on each client workstation that will access the network using the NMAS login methods. After installation, you can manage NMAS by using Authentication Management tile in OpenText identity Console.
The NMAS client software now ships with the OpenText Client. For more information, refer to the OpenText Client for Windows documentation.
During the installation, NMAS extends the OpenText eDirectory schema and creates new objects in the Security container in the OpenText eDirectory tree. These new objects are the Authorized Login Methods container, the Authorized Post-Login Methods container, the Security Policy object, and the Login Policy object. All login methods are stored and managed in the Authorized Login Methods container. All post-login methods are stored and managed in the Authorized Post-Login Methods container.
Several currently supported login methods are available on the NMAS software image.
NMAS software includes support for a number of login methods from third-party authentication developers. Refer to the OpenText Partners Web site for a list of OpenText partners.
Each partner that develops login methods for NMAS addresses network authentication with unique product features and characteristics. Therefore, each login method varies in its actual security properties.
OpenText has not evaluated the security methodologies of these partner products, so although these products might have qualified for the OpenText Yes, Tested & Approved or OpenText Directory Enabled logos, those logos relate to general product interoperability only.
We encourage you to carefully investigate each partner's product features to determine which product will best meet your security needs. Also note that some login methods require additional hardware and software not included with the NMAS product.
NMAS login methods can be installed by using the following:
nmasinst (available on all OpenText eDirectory platforms), which requires OpenText eDirectory to be installed
Authentication Management tile in OpenText Identity Console.
For more information on installing a login method, see Ways of Installing a Login Method
Universal Password is a way to simplify the integration and management of different password and authentication systems into a coherent network. It provides one password for all access to OpenText eDirectory, enables the use of extended characters in passwords, enables advanced password policy enforcement, and allows synchronization of passwords from OpenText eDirectory to other systems.
For more information on Universal Password, see Section 26.0, Managing Passwords.
You can manage NMAS by using Authentication Management tile in OpenText Identity Console. It is a Web-based utility for managing OpenText eDirectory. Specific property pages in OpenText Identity Console let you manage login methods, login sequences, enrollment, and graded authentication.
By default, NMAS installs the standard NDS password login method. Additional login methods can be installed by using Authentication Management in OpenText Identity Console, and a wizard launched from the Authorized Login Methods container using the Create New Object option. Post-login methods can be installed using a wizard launched from the Authorized Post-Login Methods container using the Create New Object option.
For more information about installing login methods, see Ways of Installing a Login Method.