1. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org

2. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org E NTERPRISE I DENTITY AND A CCESS M ANAGEMENT @ The University of the Virgin Islands Using Microsoft’s Forefront Identity Management

3. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org S UMMARY  This session discusses the University of the Virgin Islands current identity and access management processes, culminating in implementation of Microsoft’s Forefront Identity Manager

4. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org T HE U NIVERSITY OF THE V IRGIN I SLANDS  Historically American. Uniquely Caribbean. Globally Interactive.  Approximately 2600 students  Two Campuses (St. Thomas & St. Croix) 40 miles of sea water between them

5. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org E NTERPRISE D ATA & U SER S ERVICES  Enterprise Applications Banner Blackboard Email (Gmail & Live@edu) Library Database Raiser’s Edge myCampus Portal

6. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org I DENTITIES AT UVI UVI ID number in all systems – Email – Network – Blackboard UVI ID Number – PeopleAdmin – Self Service Banner First 6 letters of last name + first name initial – Banner First name initial + first six letters of last name – Email – Network – Blackboard

7. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org D IVISION OF DUTIES Network Operations Staff Email AD Maintenance Network Access EDUS Student Email IdM Project

8. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org I SSUES WITH VARIED I DENTITIES Issue Staff and students have different IDs in systems Staff have different IDs in different systems No centralized means of giving access No centralized authentication No centralized means of deprovisioning accounts Impact

9. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org I SSUES (C ONT ’ D ) Issue Key system access and authentication managed by different departments Portal not fully leveraged – Group Creation – Group Membership – Messaging – Email Communications Impact

10. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org P OTENTIAL SOLUTIONS  Oracle Waveset  Oracle Identity Manager Suite  Microsoft’s Identity Lifecycle Management (ILM) now Forefront Identity Management

11. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org FIM SELECTED  FIM available at reasonable cost  Microsoft Campus Agreement Operating Systems Office Suite Other Software  Leverage CampusEAI expertise and support

12. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org P OLICIES  Devised with HR and Registrar For access parameters (limits) Name changes/account names

13. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org P RE -I D M C LEANUP  Enter student email addresses in AD  Enter all email addresses in new field in AD  Enter UVI ID in AD for staff  Resolve AD inconsistencies Campus OU Group

14. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org FIM D ELIVERABLES  Automate Access to groups, OUs, Campuses  Manage Email & AD provisioning  Use Banner as the trigger for all account creations and provisioning Authentication process Portal group creation Provisioning/De-provisioning Include a password change application

15. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org P ROJECT R EQUIREMENTS Expected On-site test environment Network Operations project support Outside help for cleanup Reality CampusEAI hosted test environment EDUS on it’s own (NetOps full support at project end) EDUS cleaned up AD

16. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org P ROJECT CHANGES  Email (Exchange) server failed Move to Live@edu hosted email for employees Had to be incorporated into FIM  Accounts created outside of FIM*  Student email still on Google Apps*

17. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org H OW DOES IT WORK ? Like a Charm!

18. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org E MPLOYEES Employees After being added in Banner – Given an account in AD Placed in groups for campus, status (staff, faculty), department, gender, etc. – Given an email account on Live@edu – Given a unique password to access the network Students Given an account in AD Placed in groups for campus, dorm name, school of study, gender, etc. – Given an email account on Google Apps – Given a unique password to access the network

19. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org B ONUSES  Unique password  Password management suite Remote password management

20. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org FIM H IGHLIGHTED  All persons requiring network access need to be in Banner  Persons with two names in the network  sharris & jharris – same employee  Persons without affiliation in the network Employees on PSAs (audit) JROTC instructors

21. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org K EY L ESSONS  Vendor Turnover  Timeline Clear; Reasonable  Communication Stakeholders, Colleagues  Establish Team Team Meetings Internal and External

22. live. learn. work. play. 1111 Superior Ave E Suite 310 Cleveland Ohio 44114 Tel: 216.589.9626 Fax: 216.589.9639 info@campuseai.org http://www.campuseai.org