Products – RCDevs Security Solutions

WebADM

WebADM is the RCDevs' Web-based Control Center. It provides application management interfaces for OpenOTP / TiQR and related applications, combined with a powerful LDAP management interface. It includes detailed security audit with geolocations and reporting tools.

WebADM provides fine-grained Identity and Access Management (IAM) with delegations, role-based access control, client policies... It supports the federation of multiple LDAP directories, mixed UNIX/AD environments. It includes an Integrated PKI to secure access to the administration interface.

A JSON-RPC interface (WebADM Manager) provides methods for manipulating LDAP objects and RCDevs' application features. It is also possible to integrate LDAP or OpenOTP Token management capabilities in your corporate user portals.

OpenOTP Server

OpenOTP is the most advanced Two-Factor Authentication Server ever. It supports OATH Event-based, Time-based and Challenge-based Software / Hardware Tokens, FIDO-U2F Devices, YubiKeys, Google Authenticator, Mobile-OTP, SMS / MAIL / Secure Mail OTP and LDAP Domain login.

The integrated RADIUS Server (RadiusBridge) provides OpenOTP multi-factor methods for VPNs, SSL-VPNs, Citrix, VMWare, Enterprise Wifi or Microsoft reverse proxies.

The integrated SMS Relay for SMS OTP (SMSHub) provides powerful SMS relaying capabilities with failover, load-balancing, custom SMSC, prefix-based routing...

OpenOTP Server

Radius Bridge

SSH Key Management

SpanKey is a centralized SSH key server for OpenSSH where the public keys are stored in your central LDAP directory

With SpanKey there is no need to distribute, manually expire or maintain the public keys on the servers. Instead the SpanKey agent is deployed on the servers and is responsible for providing the users’ public keys on-demand.

SpanKey server provides per-host access control with “server tagging”, LDAP access groups, centralized management from the RCDevs WebADM console, shared accounts, privileged users (master keys), recovery keys… It supports public key expiration with automated workflows for SSH key renewal (via Self-Services)

TiQR Server

TiQR is an innovative secure login and signing system where users just need to scan QRCodes to authenticate to Web Sites or digitally sign electronic transactions, without needing to enter their username or password.

The TiQR implementation is certified for banking-level security and audits. It relies on the OATH-OCRA Challenge-Response algorithm, RSA public key algorythms and AES-256 cryptography.

With TiQR Push, electronic signatures can be provided to the users without needing to scan a QRCode on a computer. TiQR can alternatively use push notifications for all its operations

OpenID/SAML IdP

Our Web Federation Server or Identity Provider (IdP) provides single-sign-on (SSO) to federates your Web accesses with both OpenID v1.1 / 2.0 and SAML v2.0.

Unlike other identity provider applications, our server is extremely easy to setup and configure. It is able to return user groups and attributes. It supports SAML POST redirects and IdP-initiated logins, OpenID SReg and PAPE policies... It relies on OpenOTP, TiQR and PKI as backend for the user authentication.

Self-Services

Our security solutions are accompanied with a set of highly-confirable self-service applications (end-user managment portals).

Self-Service Desk lets users self-manage their account, enroll Tokens, Yubikeys, U2F Devices, activate TiQR mobile...
Self-Registration sends an email or SMS with a one-time link to let users enroll OTP Tokens, U2F Devices or activate TiQR.
Password Reset lets user change their lost or expired LDAP / AD password with OTP, U2F, TiQR or PKI authentication.

Web Plugins

RCDevs provides Web integration plugins on-demand for major open-source software including CMS, CRM, WebMail, Private Cloud, document management, e-commerce, etc...

All our plugins provide both OTP and U2F methods for strong user authentication. They are easily integrated and distributed in open-source under the GNU licenses. Users are also free to customize and re-design at their convenience.