Utilizing DigitalPersona at a financial institution
Updated July 20, 2020
Utilizing DigitalPersona at a financial institution
Score 10 out of 10
Vetted Review
Verified User
Overall Satisfaction with HID DigitalPersona (formerly Crossmatch)
We use DigitalPersona throughout the whole bank, from retail all the way to executives. It works for us because it allows the users to quickly log into machines by using the U.are.U.4500 biometric reader. The DigitalPersona software adds an extra layer of security where if a users' password was stolen, it is impossible to copy their fingerprint.
- Provides an extra layer of security, each person has a unique fingerprint.
- Allows users to quickly log in to or switch computers on the fly, much faster than typing in a password.
- Can be used with all kinds of programs. We utilize it with any program that requires authentication, and you can modify the software to work with several applications.
- I find that sometimes I have had to delete a users fingerprints and re-add them. There must be something going on where the software believes that the user has changed their fingerprints.
- I have on occasion come across a person where the reader was unable to create fingerprints for that user. It would be interesting to see if the sensitivity of the 4500 reader could be improved on.
- I find that using the DigitalPersona software makes the users ultimately forget their passwords. Maybe every once in a while the software could require the user to type in their Windows password to help them remember it.
We have the DigitalPersona software running on two virtual servers and it is mainly used for Windows authentication. I have it tied to AD and it has worked very well in our environment. I have also created some log-ons for other applications that are most used by users. This helps the users log on more quickly and more securely.
We have DigitalPersona fully integrated into Active Directory. Doing this allows the users to move to any part of the bank and log onto any machine securely at any branch of the bank. All of the passwords and credentials are stored in a central location. All security and authentication are managed within Active Directory.
We are mainly utilizing the DigitalPersona software on all workstations at every branch of the bank. It is used mainly for Windows log-ons but is also utilized for several financial applications. Protection of financial records is extremely important at the bank. Users can also create logons utilizing the DigitalPersona software themselves for other applications that they use.
We utilized HID and it greatly helped with credentials and authentication in AD. Having HID work with Azure HD greatly streamlined the password process. On top of that all users once indoctrinated to the world of HID, really relied on the biometric system. They relied so much that they always forgot their passwords at some point, forgetting that they changed every 45 days.
- Provides a quick one finger authentication\log-on.
- Logging onto a machine that is used by several other users, such as in retail is no problem because the DigitalPersona software does a switch user function instead of logging out the other user.
- One negative that was apparent immediately after installing the DigitalPersona software was that users very easily forgot their Windows passwords because of the one finger log-on.
We never looked at another solution. I did initially only have the software installed locally on certain test users machines, but after testing that for a couple of months, slowly rolled it out to all users. Users of course were skeptical at first, but after I demonstrated to them how easy it was to use, they were won over.