Post on 22-Dec-2015
Identity Management,what does it solve
By Gautham Mudra
Agenda
Introduction Security and Business Issues Benefits of Identity Management Architecture Features of Identity Management Conclusion Q & A
Introduction
Identity Management is all about Authorization/ Authentication Access Control Auditing User Provisioning Single Sign On
Security Issues Typically the users have to remember 15-
20 passwords. Consequently they either choose easy to crack passwords or even worse write it down on piece of paper.
Each application implements its own security modules which might be weak.
Denying access to a user for all the applications when he quits the organization.
Distribution of information and access control based on their identity.
Business Issues Some industry analysts estimate that as
much as 60 percent of help desk calls are Password related. Password resets are estimated by analysts
to cost between $30 and $60 per call. Delays in workflow processes to enable a
new employee work status. Bad user experience through multiple
required login.
Benefits of Identity Management Reduce administration, Help desk and technical
support costs Provide competitive advantage through enabling
automation and streamlining workflow. Improve customer and employee service confidentiality of customers, suppliers, and employees Reduce time taken to enable new employees to get
access to required resources within the organization Reduce risk of ex-employees retaining access to
organizational resources Data Integrity
Features of Identity Management
Identity Management
Architecture
Authorization/Authentication
Provisioning
Access Control
Commercial products offer Role Based Access Control
Implement Multi layer and Multi lateral security models.
Access Control based on roles assigned to users.
Auditing
Logging information for the administrator
Smart Auditing systems can implement a simple IDS
Detects brute force password attacks.
Single Sign On
2 Categories Single sign on into all the applications with
in the enterprise Federated Identity
Federated Identity
Conclusion Identity Management is a rapidly
evolving market. Its not an off the shelf product but
needs lot of customization. Implementation of these solutions is
very difficult But it’s very promising and if rightly
implemented will reap lot of security and business benefits.
Q & A