Identity Management,what does it solve

By Gautham Mudra

Agenda

Introduction Security and Business Issues Benefits of Identity Management Architecture Features of Identity Management Conclusion Q & A

Introduction

Identity Management is all about Authorization/ Authentication Access Control Auditing User Provisioning Single Sign On

Security Issues Typically the users have to remember 15-

20 passwords. Consequently they either choose easy to crack passwords or even worse write it down on piece of paper.

Each application implements its own security modules which might be weak.

Denying access to a user for all the applications when he quits the organization.

Distribution of information and access control based on their identity.

Business Issues Some industry analysts estimate that as

much as 60 percent of help desk calls are Password related. Password resets are estimated by analysts

to cost between $30 and $60 per call. Delays in workflow processes to enable a

new employee work status. Bad user experience through multiple

required login.

Benefits of Identity Management Reduce administration, Help desk and technical

support costs Provide competitive advantage through enabling

automation and streamlining workflow. Improve customer and employee service confidentiality of customers, suppliers, and employees Reduce time taken to enable new employees to get

access to required resources within the organization Reduce risk of ex-employees retaining access to

organizational resources Data Integrity

Features of Identity Management

Identity Management

Architecture

Authorization/Authentication

Provisioning

Access Control

Commercial products offer Role Based Access Control

Implement Multi layer and Multi lateral security models.

Access Control based on roles assigned to users.

Auditing

Logging information for the administrator

Smart Auditing systems can implement a simple IDS

Detects brute force password attacks.

Single Sign On

2 Categories Single sign on into all the applications with

in the enterprise Federated Identity

Federated Identity

Conclusion Identity Management is a rapidly

evolving market. Its not an off the shelf product but

needs lot of customization. Implementation of these solutions is

very difficult But it’s very promising and if rightly

implemented will reap lot of security and business benefits.

Q & A