Identity Management Round Table Emerging Themes & Issues Spring CSG ‘07

We Have More Questions Than Answers ● Areas of Interest – Standards for Digital Identity Lifecycle – Provisioning / De-Provisioning – Relationship to other institutions ● Status of federated identity management – Directory Services – Current Architectural Status & Plans for the Future

Design Lifecycle ● How mature is your IdM? ● How many generations has it gone through? ● How many functional partners did you include in your first IdM design? ● How many need to be around the table for the latest iteration? ● From iteration #1 to iteration #n, what lessons have been learned?

Digital Lifecycle ● Who is entitled to receive a digital identity from your institution? ● What is the minimal verified biographical information needed for a digital identity? ● As identity owner’s roles change how timely is the update of this information? ● Under what circumstances is a digital identity either locked or “retired”?

Provisioning / De-Provisioning ● Is this function either desirable or necessary? ● How (if at all) is it distributed at your institution? (Role-based provisioning) ● What policies exist regarding information beyond the base that must be verified for each provisioning action? ● Does your IdM contain canonical source information that isn’t imported from other sources?

Enabling “Martian” Users ● To what extent do you leverage federated identity management techniques? ● Absent ubiquitous federations, what alternative approaches are available on campus? ● Where do federated IdM technologies rank in your priorities for IdM in the near future?

Directory Services ● How easy is it for the entitled community to access directory information from your IdM? ● What (if any) policies exist for those accessing (potentially) private IdM information to make access decisions? ● Is your directory federated?

Governance ● Does your campus have an IdM governance structure? ● Who is involved (IT, faculty, administrative staff, students)? ● What changes are you seeking to your IdM governance structure (how will that position you better)?

Architecture & Plans ● How many people are in the processing of significant architectural revisions of the IdM subsystems? ● Senses of scope and cost? – How has this changed through the generations of IdM? – What has been promised to the community about the NG IdM? ● How broadly is there buy-in from your institution’s leaders?

Final Thoughts !