1. Secure Your Risk. Increase Your Bottom Line.™ www.fischerinternational.com Leda McNair Database Administrator Coppin State University Brian Vinacco Director of Consulting Services Fischer International Corporation

2. Agenda What is Identity Management? Project Scope / Timeline Technology Selection Phase I: Password Management Phase II: Provisioning Phase III and Beyond Summary: Critical Factors Q & A

3. What is Identity Management? Password Management / Access Management Provisioning / Authorization Compliance A Are you who you say you are? A What permissions do you have? A What permissions are you SUPPOSED to have? When did you have those permissions? Who approved those permissions?

4. What is Identity Management? Password Management Password Authentication EMPLOYEES STUDENTS DISTANCE LEARNERS CONTRACT PASSWORDS

5. What is Identity Management? Extranet Business Apps Oracle- Peoplesoft Support Applications Active Directory Password Authentication PASSWORDS EMPLOYEES STUDENTS DISTANCE LEARNERS CONTRACT PASSWORDS Provisioning / Authorization Directories Email Data Bases Servers Student Apps APPROVAL

6. What is Identity Management? Extranet Student Apps Password Authentication STUDENTS DISTANCE LEARNERS CONTRACT PASSWORDS Provisioning / Authorization EMPLOYEES Servers Support Applications Oracle- Peoplesoft Directories Business Apps Email Active Directory Data Bases

7. What is Identity Management? Extranet Student Apps Password Authentication STUDENTS DISTANCE LEARNERS CONTRACT PASSWORDS Compliance EMPLOYEES Data Bases Servers Support Applications Oracle- Peoplesoft Directories Business Apps Email Active Directory Continuous Gap Analysis Policy vs. Reality Audits (3 types for Coppin) Excessive Permissions Orphan Accounts Separation of Duties Password Policies

8. Critical Success Factor: Identify the Right Goals Half-Empty –Pain Points Time/labor/cost reset passwords Time/labor/cost to provision accounts Poor productivity Half-Full –University Goals Improve Service Levels to Students Increase Enrollment Generate Revenue Stronger Protection Operational Excellence FOCUS ON IMPROVING BUSINESS PROCESSES

9. Critical Success Factor: Biggest Bang PhaseBusiness ProcessIdM Technology Phase I (Fall '05)  Student Registration  Distance Learning Password Management/ Self- Service Phase II - A (Fall '05 - Win 06)  Timekeeping  Human Resources  Generic: Faculty Access  "Request to Fill" – Adjunct Professors Provisioning (employees) Phase II – B (Spring 06)  Students Self Service  Student Registration Provisioning (students) Phase III (Summer 06)  HR - HireProvisioning Phase IV (TBD)  Additional business processesPassword Management & Provisioning We are here

10. Technology Selection All the capabilities (holistic suite) Technology to meet unforeseen needs Business partnership vs. vendor Critical Success Factor: Buying Criteria: Take the long view. Fischer Identity Suite™ Focus on business processes, not programming Only solution that proved it was simple (even provisioning)

11. Fischer Identity Suite™ The Best Practice Approach PRODUCTIVITY & SIMPLICITY Drag & Drop workflow creation increases productivity, lowers cost INTEGRATION TECHNOLOGY Integration technology enables unlimited connectivity: out-of-the-box and on-the-fly ETL: any-to-any synchronization across all applications CONTINUOUS COMPLIANCE Integrate compliance across business processes Automate SoD enforcement Central audit database with robust reporting INVESTMENT PROTECTION All core IdM technologies Java, SOA, Standards, Services Integrates to all systems SAML

12. Password Management Implementation Overview Focus on business processes, not programming Only solution that proved it was simple (even provisioning) Activities: Two weeks (door to door) Remote deployment was key Quick access to on-site experts Faster Time to Value: Eliminated 4 days Cost Avoidance: Removed $20K+ from T/E Install / Customize / Enhance / Train / Deploy (includes time to debug former provisioning system) Duration: Critical Success Factors: Scope: 8000 Users Access to Network Resources (email, shares, drives, etc.)

13. Phase I Password Management

14. Password Management: Before No remote password resets for network resources Users must go on-campus to use password kiosk University reset policy: at least every 120 days Extending existing IdM solution not an option (fragile) Password Management: Before Strategic Impact: Tactical Impact: Previous State: Slows/Prohibits Business Processes –Student Registration, Distance Learning, etc. Inconsistent Image: Coppin is a Technology Leader Disruptive / Reduced Productivity –Resets performed by application groups ($$) & Help Desk ($) Expensive –Over 500/month at beginning of semester –avg. 10 min/reset x $35.00/hr

15. Password Management: Goals Improve student service levels and satisfaction Increase revenue & “bottom line” by removing barriers –Increase online registration (Student Registration) –Increase enrollment (Distance Learning) Enable critical business processes Improve functional department efficiency and productivity Reset passwords from any location (self-service) In place before Fall Semester Reduce password reset calls by 90% Improve internal resource utilization Reduce operational costs Strategic Tactical

16. Password Management: After Producti vity Gained / day 34 resets x 10 min 5 hr. 40 min.

17. Password Management: After EMPLOYEES STUDENTS DISTANCE LEARNERS CONTRACT On / Off Campus Password Reset Goals: Achieved 34 resets / day Results Online Registration Distance Learning Reset Calls Avoided Productivity Gains Doubled 11% Increase in enrollment 5 hr. 40 min./day ~1 FTE / week Time to Value 2 weeks Goals: Results Online Registration Distance Learning Reset Calls Avoided Productivity Gains Time to Value

18. Phase II Provisioning

19. Phase II: Provisioning Oracle-PeopleSoft: Employees Oracle-PeopleSoft: Students First Round Fall - Winter ‘05 Provisioning Implementation Second Round Spring ‘06

20. Provisioning: Goals Increase enrollment –Admissions: Leverage network services as “marketing tool” Improve service to students, staff –Hire: “Request to Fill” / Adjunct Professor Enable new business processes and services Reduce provisioning time from days to hours Eliminate manual, paper-driven processes Improve resource utilization for IT and Application organizations Strategic Tactical

21. Admissions Provisioning: Before Fees Paid?Matriculated? Prospective “New Student” Population Old Provisioning Solution EmailDisketc. sqr Potentially 1000’s of “New Students” Too much work to provision unless they’re confirmed Risk of not deprovisioning Manual Activation July (peak) 1500 – 1800 Actual Person-hours: 4-6 hours Turnaround: 24-48 hours Occurs 50-60 times in peak Annual Hours: 500 - 600 (12 – 15 person-weeks) student file To functional Departments Records Registration Add/Drop Date: Manually deprovision Inactive “New Student” Accounts

22. Provisioning Network Resources: After Prospective “New Student” Population Potentially 1000’s of “New Students” Provisioning triggered by “Matriculation” in PS Provisioning time reduced from 24 - 48 hours to 1. Prospective student engaged in January vs. July/August. 6-9 months of free resource access vs. 1-3 All IdM events recorded Deprovisioning automatically occurs at Add/Drop date No labor Frees-up 4 people Avoids 500-600 hours labor Scheduled Deprovision after Add/Drop Date: Revoke access Financial Aid App.Apply for Admission. Matriculated? Request Application Expected Process / Results EmailDisketc. Policies/Groups/Roles Workflow Audit

23. Phase III and Beyond Oracle-PeopleSoft Upgrade Other Business Processes and Outlying Applications Mobile: Provisioning approval, password resets, etc. Phase III Summer ‘06 Phase III and Beyond Phase IV TBD

24. Summary: Critical Success Factors Identify the Right Goals. Look for Biggest Bang First. Take a Phased Approach Buying Criteria: Take the Long View. Look at the Business Process - Not the Pain. Simple is Good. (TCO) More to come in June at the next Conference

25. Q & A Leda McNair Database Administrator Coppin State University lmcnair@coppin.edu 410-951-3885 Brian Vinacco Director, Support Services Fischer International Corporation brian.vinacco@fisc.com 239-643-1500 Stop by Fischer Exhibit - IDC Case Study - Giveaway - Access to IdM White Papers

26. “Request to Fill:” After