Critical Path and Access360 Team To Provide an Integrated Platform for Real-Time Identity Management and Provisioning.

Business Editors/High-Tech Writers

SAN FRANCISCO--(BUSINESS WIRE)--Jan. 30, 2001

Integration Of Resource Provisioning With Directory and Meta-Directory

Solutions Provides Comprehensive Provisioning Infrastructure

To Corporations, Service Providers and eBusinesses

Critical Path Inc. (Nasdaq:CPTH), the leading provider of Internet messaging infrastructure, and Access360, a leading provider of resource provisioning management solutions, today announced a strategic relationship that leverages the interoperability of Access360's access rights provisioning technology and Critical Path's directory and meta-directory solutions. Together, the two companies will offer corporations, service providers and eBusinesses with an authoritative source of identity, from which access rights can be automatically provisioned on over 50 different systems, applications and databases.

Targeted at Global 2000 companies, Access360's resource provisioning management (RPM) software, enRole(TM), and Critical Path's InJoin(TM) Directory Server and Meta-Directory allow companies to:

-- Consolidate the identities of employees and eBusiness constituents across
B2B extranets and corporate intranets into a unified directory infrastructure

-- Automate the provisioning of user access rights to a wide variety of
computing systems and applications

-- Employ complete password management functionality

"Ebusiness is driving an increasing need among businesses and service providers to quickly turn on and off access privileges to multiple resources assigned to employees, customers, and partners," said Christy Hudgins, analyst with the Burton Group. "Today, the most open and effective way to automate this task lies in coupling the strengths of resource provisioning systems with directories and meta-directories. With about a third of provisioning deployments including meta-directories, this agreement plays to the important promise of Access360's RPM system and Critical Path's strengths as a provider of directory/meta-directory products and services."

Critical Path's InJoin(TM) Meta-Directory empowers any business to leverage existing technologies, regardless of IT platform, and joins disparate mission-critical data residing throughout an organization in order to create a seamless eBusiness infrastructure that unites employees, customers and partners. Critical Path's InJoin(TM) Directory Server acts as a central repository for data and can be accessed by multiple LDAP-compatible applications. Capable of handling large amounts of data and detailed levels of access control, it is an ideal storehouse for digital certificates, user encryption keys and other data used by multiple applications.

enRole interacts with the directory, extracting user identity and combining it with business policies in order to provision access rights to a wide range of operating systems, databases, and applications, including LDAP applications, as well as instituting complete password management functionality. Critical Path's directory solutions are key to managing data synchronization and identity changes. Access360's enRole software does automatic reconciliation against the identity source, ensures necessary workflow and provides auditing capabilities as well as password management and activity reports.

"Access360 and Critical Path have created a powerful tool for managing identity information and ensuring that only the right people have access to the right resources," said Mike New, vice president of marketing at Access360. "Critical Path's ability to aggregate identity information from multiple sources, coupled with Access360's policy-based provisioning technology, is an important step in solidifying the infrastructure that companies need to conduct business via the Internet."

"By working with Access360, Critical Path is able to deliver the most comprehensive platform for provisioning services and granting user access rights," said Josh Groves, vice president of marketing alliances at Critical Path. "Today's agreement with Access360 extends our directory and meta-directory leadership and puts Critical Path well on the way to giving corporations, service providers and eBusinesses the infrastructure they need to provision new services and grant user access rights to mission critical information and applications more effectively and securely."

The companies will continue to sell their respective enRole and InJoin software; however, integration between the two systems is available for immediate delivery. Additionally, Access360 and Critical Path will closely coordinate sales and marketing efforts. The partners will jointly work with the Open Group and other standards bodies to promote standards that compliment and define this integrated offering.

About Access360

Access360 is a provider of Resource Provisioning Management (RPM) solutions for the enterprise and ASP markets. The company's enRole product introduces centralized control of access rights to multiple platforms. It helps customers such as BP Amoco, E*TRADE, Overseas Union Bank and Sony Electronics tighten system security, accelerate changes to business strategy, and reduce operating costs. Based in Irvine, Calif., Access360 has offices throughout the United States, Europe, Asia and Australia. For more information about Access360, please call 877/742-6400 or visit the Web site at www.access360.com.

About Critical Path, Inc.

Critical Path Inc. (Nasdaq:CPTH) ignites the power of information for eBusiness by providing the Internet messaging infrastructure upon which the new economy is built. The company is a single resource that powers the flow of mission-critical information through an integrated portfolio of secure messaging, directory, data integration and collaboration solutions. Critical Path's technology strengthens all aspects of the eBusiness value chain by providing the messaging infrastructure that fuels customer's new and existing eBusiness initiatives. Critical Path is headquartered in San Francisco, with offices worldwide. More information on Critical Path can be found at www.cp.net.

The statements in this press release relating to matters that are not historical are forward-looking statements. Actual results could differ materially from these forward-looking statements. Risks and uncertainties facing Critical Path are described in its prospectus dated June 1, 1999 and with its periodic filings with the Securities and Exchange Commission (www.sec.gov).

Note to Editors: Critical Path and the Critical Path logo are the trademarks of Critical Path, Inc. All other trademarks are the property of their holders.