Zero-compromise IDaaS: Achieve Both Security and Workforce Productivity
Download as PPTX, PDF2 likes776 views
The document discusses a zero-compromise identity as a service (IDaaS) approach to enhance security and productivity within complex enterprise application portfolios. It emphasizes the need for effective management of diverse applications and devices, advocating for an integrated framework to control endpoints, secure access, and facilitate user management across all environments. Key recommendations include transitioning from legacy systems, adopting new identity management solutions, and aligning IT strategies with future cloud-centric infrastructure needs.
Zero-compromise IDaaS: Achieve Both Security and Workforce Productivity
- 1. Zero-compromise IDaaS: Achieve Both Security and Workforce Productivity
- 2. The problem. Your application portfolio is complex, unmanaged and exposed.
- 3. Increasing IT complexity Thousands of employees, partners, customers, and multiple devices... Working with many, many apps, both in the cloud and on-premise.
- 4. Slow Fast NoIntegrityFullIntegrity Lock down Out of business Shadow IT New Model for Enterprise Identity Management Speed and integrity. No compromise.
- 5. Bimodal IT = Marathon Runners + Sprinters Data Center MFA Directories VPN Legacy IdP WiFi On-prem apps Mobile Apps Cloud Apps IoT Devices Desktops Social Identity
- 6. Cloud On-premise Mobile All locationsAll devicesAll users New class of identity management solution Application Management Endpoint Control Enterprise Infrastructure Security Integration Framework User Management Mobile Data Center Cloud Apps IoT Mobile Desktop MFA SIEM Partners Customers Employees Directories VPN Legacy IdP WiFi On-prem apps CASB Social Identity Cloud Directory HCM Integrated Bimodal approach
- 7. Extend existing infrastructure Control your endpoints Connect your apps Integrate your controls Embrace your users Application Management Endpoint Control Enterprise InfrastructureSecurity Integration Framework User Management Mobile Data Center Cloud Apps IoT Mobile Desktop Partners Customers Employees Directories VPN Wi-Fi On-prem apps Social Identity Cloud Directory HCM Legacy IdP SIEM CASB MFA
- 8. Connect Your Apps Application Management
- 9. LDAP · SAML · RADIUS FIREWALL Appliance 4000+ PRE-INTEGRATED WEB APPS Legacy Custom SAML WS-* OAuth Custom AppsLegacy Apps SAML WAM RADIUSLDAP WAM LDAP SAML PUBLIC CLOUDPRIVATE CLOUD Secure Hybrid Enterprise Mode 1 Mode 2
- 10. Agile application security framework Super flexible authentication OneLogin ready Secure access controls URL filtering Role-based Extensible rules library Centralized policy, triggers, logging Best-of-class ease of administration Best-of-class web agents Proven with strong customer base: Web Access Management for on-prem apps Do This Today: 1. Rewire existing applications 2. Replace legacy SiteMinders 3. Replace legacy ClearTrust Mode 1
- 11. OneLogin Virtual LDAP LDAP Endpoint Network Attached Storage NetApp, EMC Web Servers WiFi WPA2 Enterprise, Cisco, Meraki VPN Cisco, Juniper, Palo Alto Virtual LDAP -- LDAP-as-a-Service Do This Today: 1. For apps that connect to your directory over LDAP, use this instead 2. Reduce your exposure on- premises 3. Simplify your development Mode 1
- 12. Control Your Endpoints Device Management
- 13. Next, focus on Mobile Identity & Integrity IT Admin Can finally manage the actual risk of mobile access Sandy, Contractor working at a cafe Multifactor Auth (MFA) Required Rob, Sales meetings from the field Auto logged-in Brent, In-person Sales meetings at the HQ No access to Billing MFA Required Elle, Designer working at the HQ Auto logged-in Device Trusted Device Trusted Mode 2
- 14. OneLogin will protect your Macs, your PCs + + OneLogin credentials unlock machine Password is hashed locally When disconnected, last good hash Whenever connected to internet, policies apply Perfect for employees not connected to an AD domain
- 15. OneLogin will protect your phones
- 16. So you can manage your devices
- 17. Block devices that have been compromised
- 18. Understand who has which device in which state
- 19. Integrate Your Controls Security Integration Framework
- 20. OneLogin Developers API docs - SAML & NAPPS toolkits - SCIM integration
- 21. SIEM Streaming TODAY TOMORROW Powerful events API and pre-built Splunk integration Stream all events real-time to the SIEM of your choice. Query and filter on metadata Cursor-based pagination Super fast, super easy All OneLogin events sent to SIEM system in real-time JSON is pushed to HTTPS endpoint API for additional events event bus Mode 1+2
- 22. Cloud On-premise Mobile All locationsAll devicesAll users New class of identity management solution Application Management Endpoint Control Enterprise Infrastructure Security Integration Framework User Management Mobile Data Center Cloud Apps IoT Mobile Desktop MFA SIEM Partners Customers Employees Directories VPN Legacy IdP WiFi On-prem apps CASB Social Identity Cloud Directory HCM Integrated Bimodal approach
- 23. 1. Estimate number of apps your company uses. Then stop by someone’s machine and look at their tabs. 2. Ask millennial employees what makes work hard (from a systems and apps perspective). Ask for their ideal workflow. Whatever they say, someone is working that way at your company right now. And it’s your problem. 3. Ask yourself where you want to be in 5 years. Is your core competency racking, stacking, and managing machines? If not, more of your core infrastructure will move to the cloud, and you need technology that can manage that gracefully. Monday Actions
- 24. Thank you