This whitepaper details how ArrayShield IDAS Two Factor authentication system can be integrated with Salesforce.com

1. Solution Brief – 2FA for Salesforce.com
Solution Brief – 2FA for Salesforce.com
Need for Two Factor Authentication for Salesforce application
You use Salesforce because you want to take advantage of their capabilities
without having to install and maintain the application on-premise. However, you
have some concerns about verifying who is accessing your company's confidential
data that is stored outside of your IT environment. You are looking for a solution
that will provide strong authentication to protect your company and your users
from fraud.
Solution
ArrayShield’s innovative two factor authentication system - IDAS provides a secure access to
Salesforce.com application. By using its innovative pattern based authentication it provides
One-Time-Secret-Code for every transaction.
In IDAS, every user is shown with an array on the login screen which is populated with random
characters for every transaction. User has to choose a pattern which is a sequence of cells in
the array and should register the same with the system prior accessing. A translucent card is
provided to each user which has a similar structured array with transparent and opaque cells
and some random characters imprinted on the opaque cells. Each card is unique in terms of the
position of the opaque cells and the characters imprinted on them.
At the time of accessing Salesforce.com application, the user is shown with the randomly
populated array as a challenge. User will overlap the translucent card on the shown array and
will key in the characters present in the chosen pattern in the same order as a response. These
characters form the One-Time-Secret-Code for the user for that particular transaction. The
ArrayShield IDAS server verifies the user credentials by comparing user’s registered pattern and
the pattern values entered by the user. Access is given to the user if the user credentials are
valid.
ArrayShield | info@arrayshield.com Page 1

2. Solution Brief – 2FA for Salesforce.com
Integration Flow
The following diagram shows how Salesforce application can be integrated with ArrayShield
IDAS to enable its secure two factor authentication system.
Figure: Integration flow diagram for the Salesforce Application with ArrayShield IDAS
Features
Innovative Technology
ArrayShield IDAS is a patent pending (globally) technology and has won several
awards/recognitions in various forums for its innovative concept.
Ease of Use
ArrayShield IDAS is based on user-intuitive patterns which are easy to remember than complex
passwords than can be easily compromised
ArrayShield | info@arrayshield.com Page 2

3. Solution Brief – 2FA for Salesforce.com
Interoperable System
ArrayShield IDAS can also be configured as add-on module with various products of leading
technology players. Support is available for SAML, LDAP, RADIUS, TACACS protocol etc.
Easily Customizable
ArrayShield IDAS can be easily customizable to the unique needs of every organization. Once
deployed, organizations can also configure the security strength and mechanism to the amount
of risk involved in the user’s role and usability requirements.
Benefits
Low Total Cost of Ownership
ArrayShield IDAS provides Strong Authentication at a fraction of cost of traditional alternatives.
Minimal Cost is incurred during purchase as well as maintenance. As there is no need of having
costly hardware tokens or transactional costs incurred because of SMS etc, ArrayShield’s
Product provides lowest Total Cost of Ownership. No costly server hardware needed.
Mobility of the user
As ArrayShield uses a simple plastic card that can be carried on the go, it doesn’t have any
dependencies. Hence user will be able to access the application any-time, any-where.
Provides peace of mind
Protects Organizations and customers from Online Identity and data theft, hence provide peace
of mind.
Provides Compliance with regulations
Regulatory agencies agree that passwords are a weak link and are requiring companies to
implement stronger authentication. ArrayShield is a rapid, cost-effective way to comply with
Industry Guidelines, Security Standards and other Industry regulations.
Conclusion
By using IDAS Two-Factor authentication solution, organizations can enable the secure access
to their Salesforce account. The solution will make organizations of all sizes and complexities
protect from the malicious attacks happening on their online accounts.
ArrayShield | info@arrayshield.com Page 3