Identity Management, what does it solve By Gautham Mudra

Agenda  Introduction  Security and Business Issues  Benefits of Identity Management  Architecture  Features of Identity Management  Conclusion  Q & A

Introduction Identity Management is all about  Authorization/ Authentication  Access Control  Auditing  User Provisioning  Single Sign On

Security Issues  Typically the users have to remember passwords. Consequently they either choose easy to crack passwords or even worse write it down on piece of paper.  Each application implements its own security modules which might be weak.  Denying access to a user for all the applications when he quits the organization.  Distribution of information and access control based on their identity.

Business Issues  Some industry analysts estimate that as much as 60 percent of help desk calls are  Password related.  Password resets are estimated by analysts to cost between $30 and $60 per call.  Delays in workflow processes to enable a new employee work status.  Bad user experience through multiple required login.

Benefits of Identity Management  Reduce administration, Help desk and technical support costs  Provide competitive advantage through enabling automation and streamlining workflow.  Improve customer and employee service  confidentiality of customers, suppliers, and employees  Reduce time taken to enable new employees to get access to required resources within the organization  Reduce risk of ex-employees retaining access to organizational resources  Data Integrity

Features of Identity Management

Identity Management

Architecture

Authorization/Authentication

Provisioning

Access Control  Commercial products offer Role Based Access Control  Implement Multi layer and Multi lateral security models.  Access Control based on roles assigned to users.

Auditing  Logging information for the administrator  Smart Auditing systems can implement a simple IDS  Detects brute force password attacks.

Single Sign On 2 Categories  Single sign on into all the applications with in the enterprise  Federated Identity

Federated Identity

Conclusion  Identity Management is a rapidly evolving market.  Its not an off the shelf product but needs lot of customization.  Implementation of these solutions is very difficult  But it’s very promising and if rightly implemented will reap lot of security and business benefits.

Q & A