SingleTone is an appliance based solution that defines and manages access policy based on user roles and privileges. SingleKey, on the otherhand, is a secure appliance that enforces your centrally managed access policy. Together, they give complete role based identity and policy management with aggregation of other data sources and (potentially) synchronization to other data sources. The great benefit is that SingleTone provides a safe, secure way of extending directory and policy capabilities to internal and external users. The appliance provides for Federated Identity Management.

Through our engagements our clients have expressed the need for hygienic directory solutions. An immediate benefit is directories with no orphans. Furthermore, our experience reveals that roles and privileges are scattered throughout the enterprise. Directory services provision roles among many other items.

• Directories are services that tell someone who you are (authentication).
• Directories may contain policy.
• Policy is necessary for access enforcement .
• Access is about authorization and auditing.
• Directories contain necessary but not sufficient information for authorization.

SingleTone is an extensible directory and policy store. You need not modify your existing directories. We have a unique technology to collect directories and replicate them in SingleTone. Aggregating policy and directory to SingleTone makes it easier to manage directory information for access control. The directory information is available globally in minutes not hours. SingleTone provides:

• Aggregation and replication of all of you directories.
• Augmentation with role based policy.
• Delegated Administration

Together, SingleKey and SingleTone integrate Access control and Identity management in one location and under a single point of entry. The solution is unique in that SingleKey and SingelTone Federate access to your application among your business partners. By aggregating corporate directories, managing them and allowing SingleKey to authorize users, the solution to Federated Identity management is a natural extension. All this in an appliance based platform saves money and time. SingleTone policy management can be used independently of SingleKey to drive your own access devices.

One of our clients uses SingleTone to provision access for a web service based media integration application. Clients are authenticated based on who they are, what their roles are and where they work. The clients obtain access to an archive of digital media predicated on roles and their programs interact allowing sign on, desk top provisioning and delivery of media. One senior manager reported, "This archive will free up resources for us. We'll be able to find and reproduce spots for internal research and collaborate with our clients on current projects - accelerating the production process, improving our joint speed to market and the quality of our creative people. It's about finding the right content and accessing it in a timely manner, as a result of the increased speed and accessibility, the agency's content creators will make changes on the fly, a key competitive advantages in today's advertising climate."

The digital system was developed by IBM and was integrated with an existing Bayshore Network's SingleTone appliance, and began with 15,000 commercial spots. Eventually, thousands of pieces of the agency's intellectual property the digital archive is being implemented in stages, first with 1200 employees in the New York office. Eventually, all of the agency's North American and then worldwide offices totaling more than 8,000 will have access. Currently, SingleTone manages over 20,000 identities in this organization alone.