Identity Management: Some Basics Mark Crase, California State University Office of the Chancellor CENIC - March 9, 2011

2 15-Minute Fly-by  Identity Management  Basic Identity Management Services –Authentication –Authorization  Drivers and Benefits –Local –Inter-Institutional Presentation Overview

3 Identity & Access Management  A technology and policy infrastructure that will enable campuses to manage identity information and assure efficient and secure transactions that fully respect individual privacy. One Definition…

4 Top 10 Current Issues… 1. IT Funding6. Business Continuity & Disaster Recovery 2. Administrative/ERP Information Systems 6. Governance, Organization and Leadership 3. Security7. Agility, Adaptability and Responsiveness 4. Teaching and Learning with Technology 8. Learning Management Systems 5. Identity/Access Management 9. Strategic Planning 10. Infrastructure EDUCAUSE 2010

5 Basic Identity Management  Provide Enterprise Directory Services –White Pages –Yellow Pages  Reconcile Multiple Identities across Programs and Campuses  Reduce Number of Repositories of Confidential Information  Single Sign-On (or at least Initial Sign-On)… –Reduce Number of IDs and Passwords –Make Strong Passwords More Palatable Basic Services

6 Basic Access Management  eProvisioning – , Library Services, Parking, etc.  Self-provisioning –Changing/Resetting Passwords –Portal Customization (myPortal, etc.) –Self-service HR and Benefits Updates  Secure Network Access –VPN Authorization –Wireless Access Authorization  Campus Guest Network Access Basic Services

7 Role-based Authorization  Suspension of Services –Student Discipline –Financial Holds  Improved Workflow –E-Signature –B2B Transactions –System-wide electronic procurement/distribution of digital content  De-provisioning of Services –Separation of Employees –Death of Alumni Basic Services

8 Legal Compliance  Comply with Laws Related to Use of Personal Data and Response to Breaches –Help eliminate inappropriate use of SSNs –Reduce potential for need to activate campus incident response procedures  Improve Data Security Audit Compliance –“Who has access to what”  Enable Compliance with Service Contracts –Digital content providers –Service and goods providers  Respond to Document/Information Requests by Role Drivers and Benefits

9 Financial Drivers  Maximize Value of Previous Technology Investments –Internet 2, NLR, CalREN, etc. –Campus networks –Campus-based ERP efforts  More Effective Use of Resources –Reduce wear-tear on “carbon units” –Reduce cost of application development and support Drivers and Benefits

10 Security Considerations  Greater Protection of Identity Information –Reduce number of data repositories… –Enables improved hardening of remaining repositories  Enable Centralized Password Management  Increase Password Complexity and Reduce Number of Passwords  Automated De-provisioning  Bring Vendors and Contractors In Line with Campus Requirements Drivers and Benefits

11 Political Considerations  Identity theft and protection of personal data have become highly visible as public policy issues. Institutions that don’t take them seriously on a voluntary basis, will surely end up taking them seriously on a mandatory basis. –Robust, documented identity and access management policies and procedures will help prevent many breaches, and will help a campus more effectively respond to the breaches that actually occur Drivers and Benefits

12 Inter-Institutional Economies?  Financial –While a one-size-fits-all approach is not likely to work, there should be some economies-of-scale we can achieve  Political –For publicly subsidized institutions, proper stewardship of public resources is always important, but it is especially important when budgets are tight Drivers and Benefits

13 Facilitate Inter-Institutional Relationships  Facilitate Existing Articulation Agreements –Track individuals through successive institutions –Enable eApplications –Secure transmission of transcripts  Targeted Evolutionary Service Delivery –Recruits >> Applicants >> Enrolled >> Alumni  Support students enrolled in distance education programs –Deliver course materials –Administer exams Drivers and Benefits

14 Enable Creation of Federations  Facilitate Inter-Institutional Transactions –Authenticated submission of grant proposals to Federal agencies –Authenticated data reporting and financial transactions  Facilitate Faculty Collaboration –Authorized access to proprietary data repositories –Secure access to collaboration tools  Facilitate Research –Share scarce resources (Grid Computing, etc.) Drivers and Benefits

 InCommon Higher Education and Research Federation –  CSUConnect –  UCTrust – 15 Additional Information