OFFICE OF INFORMATION TECHNOLOGY Identity & Access Management at BYU

OFFICE OF INFORMATION TECHNOLOGY Foundations 1.Strong University-based Identity Management Processes Established 1984 Long-standing working committee of university partners 2.Well-managed Replicated Identity Stores Home-grown Oracle database to facilitate sharing Directory Structures based on E-Directory and Active Directory Replication facilitated by NetIQ’s IDM product and the Informatica ETL 3.Single Sign-on Authentication based on Open Source CAS project 4.Complete Web Services API (1 st generation)

OFFICE OF INFORMATION TECHNOLOGY 4 Key Business Needs 1.Allow Identity and Access Rights to be Maintained “Globally” Modernize our Data Model & Identity Store Event-Driven Architecture Standards and Protocols Federation 2.Expand our Constituencies We do a good job with our core constituencies: Students, Employees, and Dependents We do a fair job with Prospective Students and Potential Employees We do a poor job with Parents / Proxies, Alumni, EFY/Camps/Education Week, Suppliers, Ecclesiastical Leaders, etc.

OFFICE OF INFORMATION TECHNOLOGY 4 Key Business Needs 3.Strengthen Security Multi-factor Authentication Strong Authentication Monitoring and Repudiation Adaptive Authentication 4.Improve the User Experience Mobile Platforms Social Identity / Global Identity Improved Access Rights Management (Provisioning, Delegation, Virtualization, etc.)

OFFICE OF INFORMATION TECHNOLOGY Architectural View

OFFICE OF INFORMATION TECHNOLOGY Considering Our Options 1.Working with Industry Analysts Series of discussions with Gartner have been helpful Vendor discussions have also been helpful (Unicon & NetIQ) We are scheduled to talk with several universities in the next few weeks We are scheduled to meet with the Church next Wednesday 2.Looking at Technology Trends and Vendors New Technologies and Standards are creating new opportunities No vendor has a “one stop” solution…build to standards and stay flexible 3.Prioritizing our Opportunities We see opportunities that will lower the cost of application system integration We see opportunities that will reduce complexity and support costs We see opportunities to improve the user experience 4.We expect to start seeing results this summer

OFFICE OF INFORMATION TECHNOLOGY Identity & Access Management at BYU