Zero Day Access Control is about disable or de-provisioning the user in time before the enterprise data is lost. When employees are let go, or contractors are terminated often their access to application continue to exist. This is a compliance and security violation. Patient care data, banking information, citizen and employee personal data all exposed to unauthorized accesses. Often enterprises have policies to De-provision users from enterprise authentication servers when they are no longer employed or terminated contractors. This De-provisioning update does not automatically roll out to externally hosted SaaS Applications resulting in security and compliance violation

Most often enterprise IT administrator has no knowledge of all the SaaS accounts that a particular user has been provisioned into. Today enterprise Identity Access Management tools and domain authentication platforms don’t extend to external clouds beyond the enterprise firewalls. Business unit managers take proactive role to force account deprovisioning with changes in payroll and contract engagements.

Yes, Apere Single Sign-On Technology validates the user against the Active Directory before the providing access to application. If the user is de-provisioned in HRMS or disabled in Active Directory or if there are changes in group attributes in AD SSO is denied

Yes, Apere technology will document the event fully. When the user was de-provisioned and what was the trigger for this event. It can also save the SNAP shots of AD group information for the user in case of change of group attributes. Templates can be setup for specific reports SAS, GLBA, HIPAA, SOX etc.

Yes, Apere technology can be setup to send reminders to administrators or group managers when ever de-provisioning is done by application or by group association.