Iam4Cloud
- 1. Identity Management as a Service Access management as a Service Access Control as a Service Audit & Reporting as a Service
- 2. Who we are For over a decade Traxion successfully implemented a large number of Identity & Access Management solutions for a broad range of complex organizations Traxion Company Overview Founded in 2000 The Traxion Organization: o Office in Waardenburg, Netherlands o Office in Mechelen, Belgium Independent IAM Solution Integrator The Identity and Access Management Specialists Over 50 employees Microsoft Gold Certified Partner
- 3. Why us? For over a decade Traxion successfully implemented a large number of Identity & Access Management solutions for a broad range of complex organizations Traxion’s Value add to customers In-depth knowledge of different IAM Suites Many successful Implementations Expertise from Business Consultancy to implementation and support Senior Consultants with 10+ years experience Highly qualified knowledge of organizations, solutions and technology Advice on strategic, tactical & operational level 100% focus on Identity & Access Management
- 4. References
- 5. User management Always • Het Nieuwe Werken Wijzigingen Everywhere • Instroom • Op kantoor • Mutaties • Bij klanten • Uitstroom • Onderweg • Thuis Users Any device Any application • Client-server • Desktop • On premise, web based • Laptop • Hosted • Smartphone • Tablet Samenwerken • Cloud based • Privé PC • Inhuur/subcontractors • Klanten • Leveranciers • Business partners
- 6. IAM cloud challenges Public Cloud Challenges Challenges • Manual login to every cloud • Create, manage and remove service • Management of cloud services Login Access user accounts within the cloud services trust relation • Who has the right to do what? • Right authentication level Private Cloud / On premise datacenter
- 7. The solution: IAM4Cloud • Centralize and disconnect Identity & Access Management from applications and platforms • Offer IAM as a service to the organization and IT department • Secure access to web applications • Regardless the device (laptop, desktop or mobile)
- 8. IAM4Cloud framework Solution for: Single Sign-on User Management - Single sign on for multiple Solution for: cloud services - Create and remove of user - Management of cloud services accounts within cloud services Federation Identity trust relationships - Who has what rights? Broker Management - Right authentication levels Identity Provider Entitlement Management Enterprise User Account Identity Store System
- 9. Prepare 4 Cloud More issues Extra account administration On time onboarding Multiple logons for my users Extra password resets Still pay for employees who left the organization Enforce other means of authentication Central manage authorizations What to do? Extend Provisioning capabilities Extend Authentication capabilities Extend Authorization capabilities
- 10. Extend provisioning HR System On premises Cloud FirstName Terry LastName Adams Title Sales Manager Dept Sales FirstName Terry Mgr: Melissa Meyers LastName Adams EmplID 123 Group member provisioning Title Sales Manager Email Tadams@litware. com Phone system Workflow Firstname Terry FirstName Terry LastName Adams LastName Adams Phone 555-1234 Title Sales Manager Dept Sales FirstName Terry Mgr: Melissa Meyers LastName Adams Email LoginID Tadams LoginID Tadams Email tadams@litware.com Other cloud vendors Phone 555-1212 Email Tadams@litware. com Groups Melissa’s Directs All in Sales Sales App AD Owners
- 11. For whom? • Organizations that consider to (further) introduce Identity & Access Management with minimum investments and minimum impact. • Organizations who want to setup standardized and uniform Identity & Access Management both on – and off premise. Identity Management Specialists since 1997
- 12. When interesting? • When using SaaS/ Cloud services • The need for web single sign-on • Adoption of ´Het nieuwe werken´ • Implementation of ‘Bring your own device’ scenario's • Securing compliancy in dynamic environments • Mergers & acquisitions • Improvement of ICT services towards the business • The need for federative access management in situtions of enabling access for business partners to your information systems
Editor's Notes
- #10: We heard the following pains for organization that are moving towards the cloud:The account administration is growing very rapidly with the onboarding of the different cloud applicationsThis puts an extra burden on the servicedesk to create the accounts on time My users must authenticate multiple times per applicationUsers forget there password and this stresses my servicedeskWhen people leave my organisation the accounts in the cloud are still there and we need to pay for the unused accountsWe Centrally want to manage autorizationsMeaning:Extend authenticationExtend authorizationExtend Provisioning
- #11: Gather date from source systems like: HR, Phone, ExchangeLet FIM aggregation of the information and provision AD and other on premises' systems