Rubytech has implemented a unified password reset mechanism within its IDM system to address the fragmentation of corporate IT environments. The solution supports various platforms, including Active Directory, Linux distributions like RHEL and Astra Linux, and cloud-based identity services.
The system relies on five key principles: a self-service portal, mandatory multi-factor authentication (MFA), an abstraction layer for connectors, secure data transmission, and automated password rotation in vaults. The MFA process utilizes TOTP applications as the primary method and SMS as a backup.
The IDM core acts as an orchestrator, using specific connectors such as LDAP, WinRM, SSH, or SCIM to communicate with target systems. The architecture follows a Zero Knowledge approach, ensuring passwords are never stored in plain text and are transmitted via encrypted channels like TLS 1.2+.
The implementation reduced the mean time to recover access from 2–3 hours to 1–2 minutes. This automation decreased the workload on technical support teams, allowing engineers to focus on infrastructure development tasks while enabling 24/7 self-service for employees.
