IDM & IAM 2012
3 likes2,226 views
The document discusses identity and access management (IDM/IAM). It notes that with the explosion of digital identities from various sources, organizations face "identity chaos" with decentralized management of user data across multiple systems. Proper IDM aims to bring order to this situation through centralized identity administration, access control, provisioning and other core elements. The document outlines trends in IDM such as demands for stronger authentication and more mature identity infrastructures, as well as growing complexity in authorization and privacy regulations. It provides recommendations for organizations to take a gradual, standards-based approach to implementing successful IDM projects.
IDM & IAM 2012
- 1. IDM/IAM Identity & Access Management Tell me and I’ll forget Sigal Russin , Show me and I may remember VP & Senior Analyst Involve me and I’ll understand
- 2. Is it identity? 2 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 3. Identity and Access Management Access Identity Directory Control Administration Services Strong Authentication Identity & Organization & Authorization Lifecycle Virtualization Risk Based Access Administration Control Enterprise Role Mng Synchronization Single Sign-On Provisioning & Federation Reconciliation Storage Web Services Security Compliance Automation Audit & Compliance Audit Data Attestation Fraud Detection Segregation of Duties Controls Management Service Levels Risk Analysis Forensics Configuration Performance Automation 3 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 4. Where to start ?! 4 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 5. Explosion of IDs # of Business Partners Digital IDs Automation (B2B) Company (B2E) Customers (B2C) Mobility Internet Client Server Mainframe Pre 1980’s 1980’s 1990’s 2000’s Time 5 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 6. “Identity Chaos” Lots of users Multiple and systems repositories required to of identity do business information; Decentralized Multiple user management IDs, multiple , ad hoc data passwords sharing 6 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 7. IDM – Identity Management 7 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 8. 5 Core Elements of ID Management Federated Identity 8 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 9. 5 Core Elements of ID Management 9 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 10. 5 Core Elements of ID Management 10 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 11. What’s next… 11 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 12. Before Implementing Access Management 12 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 13. After Implementing Access Management 13 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 14. Trends Impacting IAM and privacy management sectors Tactical identity • IAM projects will generally be limited in scope and schedule to help ensure success. Identity assurance • Demands for stronger authentication and more mature identity provider infrastructures will raised. • You need to know which providers you are trusting, why, and for what. Gartner, Egham, UK, January 31, 2012, Summit 2012, March 12-13, London 14 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 15. Trends Impacting IAM and privacy management sectors The identity bridge • A new architectural component is needed to manage the flow of identity information between cooperating organizations. • The edge of the organization is to look inward and outward simultaneously. Authorization • It will grow more complex and more urgent due to continuing regulatory pressure. • Authorization will assume a place as a first-class business function. Gartner, Egham, UK, January 31, 2012, Summit 2012, March 12-13, London 15 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 16. Trends Impacting IAM and privacy management sectors The sea of tokens • The new tokens-and-transformers architecture is more modular, more flexible and more loosely coupled. Policy battles • Privacy and identity theft are having a serious impact on business operations and viability. • The business community, law enforcement and national security communities will continue to fight over identification, privacy laws and regulations. Gartner, Egham, UK, January 31, 2012, Summit 2012, March 12-13, London 16 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 17. Identity Management Market Overlap without integration causes consternation and cost Around 60 vendors in IDM Directory Authentication Password Management Access Management Provisioning Meta-directory Appliances Virtual Directory 17 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 18. IAM's Biggest Concerns HP Research Report, Security & Risk Management Survey Conducted by Coleman Parkes Research, 2012 18 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 19. Be Aware - Most of IDM projects failed • Allocating human resources for maintenance 1 IDM project • Project Leaders: HR with cooperation of IT 2 • Support from organization's high management 3 • Sharing and training of all organization 4 departments 19 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 20. Most of IDM projects failed - Be Aware! • Data Cleansing: job definitions include user 5 authorizations • Mirroring to organization processes – workflows will 6 maximize ROI • If you choose a product make sure about the integration 7 to all organization systems -Learn the product! • Step by Step-integration special groups on AD with one 8 organizational system (SAP, billing, CRM etc.) 20 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 21. Market Overview Vendor Access ProvN Passwd Meta AuthN IBM Novell Oracle CA Microsoft Netegrity Oblix RSA Entrust = Partner provided 21 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 22. Identity & Access Management - Israeli Market Positioning 1Q10-11 Estimated Technology Penetration Using this technolog y 27% Evaluating IDMIAM Not using Local Support 73% Player Worldwide IBM Leader CA Prominent Novell WAM Player Oracle-Sun SAP Quest BMC This analysis should be used with its supporting documents Microsoft Velo (OS) Market Presence 22 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 23. 2012 World Leaders in Cloud Identity Management Market Presence Forrester Survey 23 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 24. Centralize Security Maintain Enforce Control Audit Over Data Policies Assets IDM Benefits Automate Enhance Auditing Visibility Procedures Detect Security, Regulatory 24 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 25. 2013 Will Change Enterprise IDM The rise of stateless identity ID standards Dissolving internal/external boundaries Identity assurance “It’s tough to pull your head up from the static world of on-premises user management to the more dynamic world.” 2013 Planning Guide: Identity and Privacy, by Ian Glazer 25 Sigal Russin’s work Copyright 2012 @STKI Do not remove November 14, 2012graphic or portion of graphic By UCStrategies Staff source or attribution from any
- 26. Recommendations Organization should translate the business world into project specification process Do not try to fit the IDM system to your organization Before starting – define SOW -> Consider alternatives-> POC for business process Organization limits – try to start IDM inside the organization Matching expectations of project initiators, users and decision makers Marketing the project to show the meanings and painful problems 26 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 27. Recommendations Small steps such as Gradual connection to organization systems, initial provisioning, role based access control etc. Standardization- you don’t need to update the system all the time Organization password policy can take a part on IDM project – SSO on the last stage Workflows- pay attention for duplication or conflict in organizational identities Organizational Tree - reflect the organizational structure in HR and IT Each department has a manager (referant) who responsible for management permissions to the same department 27 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic
- 28. Thank You! Scan Me To Your Contacts: 28 Sigal Russin’s work Copyright 2012 @STKI Do not remove source or attribution from any graphic or portion of graphic