How to Leverage New Capabilities in the CA Identity Suite

24
How to Leverage New Capabilities in the CA Identity Suite Joe Burgett Security CA Technologies Advisor SCX04E

Transcript of How to Leverage New Capabilities in the CA Identity Suite

Page 1: How to Leverage New Capabilities in the CA Identity Suite

HowtoLeverageNewCapabilitiesintheCAIdentitySuite

JoeBurgett

Security

CATechnologiesAdvisorSCX04E

Page 2: How to Leverage New Capabilities in the CA Identity Suite

2 ©2015CA.ALLRIGHTSRESERVED.

©2015CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2015presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation

Page 3: How to Leverage New Capabilities in the CA Identity Suite

3 ©2015CA.ALLRIGHTSRESERVED.

Abstract

ThissessionwillhighlightkeynewfeaturesoftheCAIdentitySuite,includingintegrationswithCASSOandotherCASecurityproducts. ComelearnhowtheIdentitySuitecanhelpyousimplifyyouridentitymanagementchallenge.

JoeBurgett

CATechnologiesAdvisor

Page 4: How to Leverage New Capabilities in the CA Identity Suite

4 ©2015CA.ALLRIGHTSRESERVED.

Agenda

IDENTITYMANAGEMENTINTODAYSENTERPRISE

DEMO

OVERVIEWOFCAIDENTITYSUITE(ARCHITECTURE&CONCEPTS)

CONFIGURATIONOFTHESUITECAPABILITIES

REVIEW/Q&A

1

2

3

4

5

Page 5: How to Leverage New Capabilities in the CA Identity Suite

5 ©2015CA.ALLRIGHTSRESERVED.

IdentityManagementshiftsfrombeingIT-centric…toBusiness-centric…

BusinessUser&Customers

IT-awareusers

Page 6: How to Leverage New Capabilities in the CA Identity Suite

6 ©2015CA.ALLRIGHTSRESERVED.

DemandsoftheBusinessUser

Supportmydevice

Businessfriendly

Decisionsupport tools

Unifiedinterface

Productivity

Customizedexperience

Page 7: How to Leverage New Capabilities in the CA Identity Suite

7 ©2015CA.ALLRIGHTSRESERVED.

But,theITuserhasneedstoo!

Policyenforcement

LowTCO

Applicationconnectivity

Fastprovisioning

FastROI

Compliancereporting &auditing

Page 8: How to Leverage New Capabilities in the CA Identity Suite

8 ©2015CA.ALLRIGHTSRESERVED.

CAChangestheGame

Page 9: How to Leverage New Capabilities in the CA Identity Suite

9 ©2015CA.ALLRIGHTSRESERVED.

Convenient,Intuitive,Business-orientedUserExperience§ AOne-StopShopforbusiness

useraccesstoallidentityservices– Userexperiencethatisspecifically

designedforbusiness.Usestermsthatbusinessusersunderstand.§ Business-orientedproactiveanalytical&advisorytools

§ Personalizeddashboards§ Business-oriented resourcenames

Page 10: How to Leverage New Capabilities in the CA Identity Suite

10 ©2015CA.ALLRIGHTSRESERVED.

Demo NOTEToBeRemoved:

AccessRequest(Role/Group/Attr.)

ADEndpointGroupRequest

AppLauncher(W&W/OCASSO)

EnhancedRequestTracking

Page 11: How to Leverage New Capabilities in the CA Identity Suite

11 ©2015CA.ALLRIGHTSRESERVED.

CAIdentityManagement&GovernanceCapabilities

Business-OrientedUserExperience

IDENTITYMANAGEMENT&GOVERNANCE

LIFECYCLE

CAPABILITIES§ Automatedprovisioning§ Userself-service§ Supports on-premise&cloud apps§ Deploymenttools

BUSINESSVALUE§ Increasedefficiencies§ Reduced HelpDeskcosts§ Flexibility foryourcloud adoption§ Customization without coding

CAPABILITIES§ Rolemining&analytics§ Privilegeclean-up§ Automatedaccesscertifications§ Accesspolicyenforcement

BUSINESSVALUE§ Simplifyusermanagement§ Highlights improper entitlements§ Simplifiedcompliance§ Preventspolicyviolations

Management Governance

Page 12: How to Leverage New Capabilities in the CA Identity Suite

12 ©2015CA.ALLRIGHTSRESERVED.

LogicalArchitecture

RequestAccess

UsersOnboarding

SelfRequest

SelfRegistration

Certification

CAIdentityGovernance CASingleSign-On

AggregatedTasks

AggregatedEntitlements

AggregatedUsers

CAIdentityManager

Passwordreset

SingleSignOn

Action/Service Fulfillment

Emailnotification

Helpdesktickets

SIGMAimplementation

AutoProvisioning

Reconciliation

Target

Systems

LDAP

DB

Apps

Privilegedaccounts

Mobileapps

OnboardingUsers

AccessRequest

Certification

Ext.Usermanagement

User360°view

SSOLaunch Pad

ConnectorsLayerdatamappingcorrelationandaggregation

Logical Layer

PresentationLayerEndusers

BusinessManagers

DelegatedAdmin

Contract-ors

BusinessPartners

User Type

ApplicationOwner

RiskAnalyzerandSimulator

Approvals/Implementations

RequestManagementEntitlementCatalogMng

Preventative Advicetools

ManagerialDashboards

PersonalizationandBrandingAdvancedFormGenerator

CAIdentitySuite

Page 13: How to Leverage New Capabilities in the CA Identity Suite

13 ©2015CA.ALLRIGHTSRESERVED.

FoundationofaRequest

CAIdentity Suite(Portal)

Tasks

Forms

TargetPermissions

AccessCatalog

Apps/Groups Entitlements

Cart

AdministratorView

BusinessUser

ViewCAIdentityManager

Tasks

Events

Forms/Profile Screens

Roles/Attributes /Groups

PX Emails

Identity Policies

1:1TEWS

Page 14: How to Leverage New Capabilities in the CA Identity Suite

14 ©2015CA.ALLRIGHTSRESERVED.

OrderofaRequest

CAIdentity Suite

AccessCatalog

Apps/Groups Entitlements

Cart

CAIdentityManager

Task

Events

Roles/Attributes/Groups

Page 15: How to Leverage New Capabilities in the CA Identity Suite

15 ©2015CA.ALLRIGHTSRESERVED.

EntitlementCatalog

Page 16: How to Leverage New Capabilities in the CA Identity Suite

16 ©2015CA.ALLRIGHTSRESERVED.

AccessRequest

Page 17: How to Leverage New Capabilities in the CA Identity Suite

17 ©2015CA.ALLRIGHTSRESERVED.

DirectActiveDirectoryGroupRequest

Page 18: How to Leverage New Capabilities in the CA Identity Suite

18 ©2015CA.ALLRIGHTSRESERVED.

AppLaunch(Placeholder…WorkingthroughanIssue)

Page 19: How to Leverage New Capabilities in the CA Identity Suite

19 ©2015CA.ALLRIGHTSRESERVED.

AdvancedSearch

Page 20: How to Leverage New Capabilities in the CA Identity Suite

20 ©2015CA.ALLRIGHTSRESERVED.

ConfigurationDemo NOTEToBeRemoved:

AccessRequest(Role/Group/Attr.)

ADEndpointGroupRequest

AppLauncher(W&W/OCASSO)

EnhancedRequestTracking

Page 21: How to Leverage New Capabilities in the CA Identity Suite

21 ©2015CA.ALLRIGHTSRESERVED.

ConfigurationDemo

§ AccessRequest(Role/Attribute)

§ ADEndpointGroupRequest

§ AppLauncher(W&W/OCASSO)

§ EnhancedRequestTracking

Page 22: How to Leverage New Capabilities in the CA Identity Suite

22 ©2015CA.ALLRIGHTSRESERVED.

Review

IDENTITYMANAGEMENTINTODAYSENTERPRISE

DEMO

OVERVIEWOFCAIDENTITYSUITE(ARCHITECTURE&CONCEPTS)

CONFIGURATIONOFTHESUITECAPABILITIES

REVIEW/Q&A

1

2

3

4

5

Page 23: How to Leverage New Capabilities in the CA Identity Suite

23 ©2015CA.ALLRIGHTSRESERVED.

RecommendedSessions

SESSION# TITLE DATE/TIME

SCX07S IdentitySuiteRoadmap&Vision 11/19/2015 at1:00PM

SCT29SCaseStudy:DigitalTransformationthroughSuccessful,Large-scaleIdentityManagementDeployment 11/19/2015 at11:30AM

SCT12S TeachingIdentitytoSing:ACocaColaCaseStudy 11/19/2015 at3:00PM

Page 24: How to Leverage New Capabilities in the CA Identity Suite

24 ©2015CA.ALLRIGHTSRESERVED.

Q&A