User Lifecycle Management with MIIS 2003

1
User Lifecycle Management with MIIS 2003

• Simon Veale

2
Market Drivers
Increase Operational Efficiency
On-Line Business Enablement
Reduce Security Risk
Comply with Regulatory Requirements
3
The Business Challenge
Administrator has 34 requests for new user
accounts buried in a stack of papers on his desk.

Employee terminated 4 months ago. Still has
access to the VPN system.
Moved to a different building. Employees still
calling her old phone number.
Helpdesk staff spends 1/3 of the day resetting
passwords.
Security Risks
Increased IT Cost
Lost Productivity
4
The IT Challenge

• The single enterprise directory is a myth
• Few applications support directory interop
• Every app platform deployed increases the
  amount of identity data to be managed

Too Many User Repositories

• Platforms Mainframe, AS/400, NIX
• Applications ERP, Payroll, Inventory
• Databases SQL, Oracle, DB2, X.500

User Data is Not Only in Directories

• Systems exist in isolation
• IT must manage identity data
• Ineffective user de-provisioning

Lack of Business Process Integration
5
The Identity Lifecycle

• Account Changes
• Promotions
• Transfers
• New privileges
• Attribute changes

• New User
• User ID creation
• Credential issuance
• Access rights

• Password Mgmt
• Strong passwords
• Lost password
• Password reset

• Retire User
• Delete/Freeze accounts
• Delete/Freeze entitlements

6
HR System
Active Directory Users Groups
Password Reset
Windows Logon Password Reset Email Home Folder
Telephone System
ADAM
Approval Workflow
Sun ONE
Whitepages
User Management
Expenses System
7
Scenarios

• Provisioning / Deprovisioning
• Classic Metadirectory
• Group Management
• Workflow
• Password Management

8
Microsoft Identity Integration Server
9
Resources

• http//www.microsoft.com/MIIS