1. July 12, 2012 Tier I Meeting Identity Management

2. Infrastructure / Provisioning (3) Goals: Design and implement… July 2012 Tier I Meeting: Identity Management Oracle Identity Manager OIM User provisioning and administration solution that automates the process of adding, updating and deleting user accounts from applications and directories. (Already in use; moving from 9 to 11g) Oracle Internet Directory OID An LDAP v3 directory that serves as the central user repository for Oracle Identity Management, simplifying user administration Oracle Virtual Directory OVD Aggregates identity information from multiple sources and present a real-time unified view

3. Current Status July 2012 Tier I Meeting: Identity Management CompletionStatusActivity October 2012In Progress Provisioning Infrastructure to replace our Novell eDirectory / LDAP Requirements are complete Data is loaded to the test environment Testing started this week 2013 – 2014ProposedHR/SA Split and update the Computer Account Management System (CAMS) as/if needed 2014Proposed Provisioning Infrastructure to replace/upgrade CAMS, Computer Account Management System Single Sign-on

4. Identity Management July 2012 Tier I Meeting: Identity Management This controls the complete life cycle of a person’s relationship to the university. ActionStudentsEmployment 1. UserID Creation 2. Account openings When admittedWhen employed 3.AdjustmentsWhen needed 4. Account Closures When no longer enrolled When no longer employed 5. On-going relationship through the Portal As needed

5. Old Password Change Page (1) July 2012 Tier I Meeting: Identity Management

6. Old Password Change Page (2) July 2012 Tier I Meeting: Identity Management

7. Old Password Change Page (3) July 2012 Tier I Meeting: Identity Management

8. Novell Password Page July 2012 Tier I Meeting: Identity Management

9. New Password Change Page July 2012 Tier I Meeting: Identity Management This is unbranded. We will be addressing that while in the user environment.

10. New password Change Page (2) July 2012 Tier I Meeting: Identity Management Out of the box Unbranded and not refined to match capabilities of user

11. Authentication Pattern: Current July 2012 Tier I Meeting: Identity Management

12. Authentication Pattern: Future July 2012 Tier I Meeting: Identity Management

13. Authentication Pattern: AD July 2012 Tier I Meeting: Identity Management No Changes We are planning to ‘lock down’ Active Directory.

14. LDAP Proxy LDAP Proxy can only be set up by Information Technology IT will create a request form, then IT staff will discuss your needs Contact Linda Krauth if you currently have a system authenticating to LDAP or Active Directory or if you are planning to have a system authenticate to them. July 2012 Tier I Meeting: Identity Management

15. Authentications (partial) July 2012 Tier I Meeting: Identity Management ApplicationAuthenticates to… Active DirectoryAD Backup Utility User Itself BlackberryItself BlackboardeDir BSR AdvanceeDir Cardinal Research ClusterAD CardMailCardMail (Password is passed from AD) Content Management System (Plone) eDir Crystal EnterpriseeDir Dynamic KnowledgeAD ExchangeAD HomeAD Home Directories AD iRISeDir MySofteDir OnBaseAD PeopleSoft HR/SAeDir PeopleSoft: Data WarehouseeDir PeopleSoft: FinancialseDir PortaleDir SharePointAD UPKAD VPNeDir WirelessAD

16. Infrastructure / Provisioning (2) Authentication We will publish a full list of known processes Please review the list to see –is your process is included? –Is the department and departmental contact identified? –When we move from Novell, you may have to make changes. Send all corrections to Linda Krauth ( linda.krauth@louisville.edu) July 2012 Tier I Meeting: Identity Management

17. Infrastructure / Provisioning (4) July 2012 Tier I Meeting: Identity Management