Host tenants on partitioned systems

You can use multifactor authentication to grant access to users after they successfully present two or more pieces of evidence (or factors) to an authentication mechanism: knowledge (something the user and only the user knows), possession (something the user and only the user has), and inherence (something the user and only the user is).

The multiple tenancy capability uses scopes to partition the system. The result is clearly separated data, configuration, audit, roles, billing, and so on. Every operation in the system is done in the context of a scope: the system enables access only to the scopes that the user is authorized to use. This enables a single enterprise to use the biometrics system for multiple applications in different business units. Using scopes, a large organization can offer the biometrics system as a service for multiple departments (tenants).

The figure below illustrates an implementation of multiple tenancy with three tenants. Each scope encloses its tenant’s data (persons, Print Profiles, configuration, audit, roles, and so on). Although this is just one deployment, it can be used for three separate enterprises.