Service oriented Security, Trends bei I&AM und Roadmap. Christian Patrascu Principal Product Manager, Product Management, Oracle Corporation

Transcription

1 Service oriented Security, Trends bei I&AM und Roadmap Christian Patrascu Principal Product Manager, Product Management, Oracle Corporation

2 Agenda Einführung: Identity and Access Management Trends im Bereich I&AM: Vom Access Management zum Risiko Management Die Bedeutung von Rollen im User Lifecycle Management Service Orientied Security Was verbirgt sich dahinter? Fragen und Antworten

3 Agenda Einführung: Identity and Access Management Trends im Bereich I&AM: Vom Access Management zum Risiko Management Die Bedeutung von Rollen im User Lifecycle Management Service Orientied Security Was verbirgt sich dahinter? Fragen und Antworten

4 Identitäten Joe s Fish Market.Com Tropical, Fresh Water, Shell Fish, Lobster,Frogs, Whales, Seals, Clams

5 Prozesse Company Planning / Forecast Sales / Marketing Order Process Supply Chain Product Logistics Finance Reporting business process SAP Siebel IFS Web Portal icad Oracle Finance IBM / Cognos Applications New Employee: Product Manager with Management Responsibility Outlook BS File Sv....

6 Regularien Impa act Basel II Financial Services European Anti-Fraud (EU-AF) Organizations receiving EU money. European Digital Signature Directive E-commerce Time

7 Oracle Security Infrastruktur Internal Users Partners / Suppliers or local authorities Fraud D. & Strong Auth. Access Control Web Service Security External Users (Economy, Citizens) Provisioning & Role Mgt. Synchronization of User Identities Data Audit, Compliance Governance, SOD Directory Service Federation Partners / Suppliers or local authorities

8 Oracle Security Infrastruktur Internal Users Oracle Enterprise Single Sign On Oracle Adaptive Access Manager Fraud D. & Strong Auth. Oracle Access Access Control Manager Oracle Enitlements Server External Users (Economy, Citizens) Synchronization of Oracle User Identities Role Manager Oracle Identity Provisioning Manager & Role Mgt. Oracle Virtual Directory Oracle Internet Directory Audit, Compliance Governance, SOD Directory Service Partners / Suppliers or local authorities Oracle Web Service Manager Web Service Security Oracle Database Vault & Audit Oracle Data Adv. Security Enterprise User Security... Partners / Suppliers or local authorities Oracle Identity Federation Federation

9 Agenda Einführung: Identity and Access Management Trends im Bereich I&AM: Vom Access Management zum Risiko Management Die Bedeutung von Rollen im User Lifecycle Management Service Orientied Security Was verbirgt sich dahinter? Fragen und Antworten

10 Access Management: Real Life Usecases Porter Public Sector Admin. Building Software Company CVC Other Companies Reception...

11 Access Management: Real Life Usecases Porter

12 Access Management: Real Life Usecases

13 Oracle Adaptive Strong Authenticator Virtual Devices: KeyPad als Beispiel Session A Session B

14 Oracle Adaptive Risk Manager Möglichkeiten

15 Agenda Einführung: Identity and Access Management Trends im Bereich I&AM: Vom Access Management zum Risiko Management Die Bedeutung von Rollen im User Lifecycle Management Service Orientied Security Was verbirgt sich dahinter? Fragen und Antworten

16 Provisioning with the help of the 7 Samurai:... Roles Have a Long History

17 OIM with the help of the 7 Samurai: Kambei Kyuzo Gorobei Katsushiro Heihachi Shichiroji Kikuchiyo seven Samurai x three Resources = 21 Assignments

18 7 Samurai are using the OIM Kambei Kyuzo Gorobei Katsushiro Heihachi Role Samurai Policy Samurai : Sword Equipment Trainer Shichiroji Kikuchiyo seven Samurai + Policy + three Resources = 11 Assignments

19 The Chief is also using the OIM Policy Chief : Role Chief Sword Equipment Castle tōryō Tom Cruise Yul Brynner External Samurai Role Villagers The Villagers

20 rollen erleichtern das Rollenmanagement To op Down Bu uttom Up Gesamt Unternehmen IT, HR, Teilbereiche Roles 100 s Mapping w/ Context IT Roles 10 s of thousands of IT Roles Clustering/ Abstraction System Privileges 100 s to 1000 s of systems 10 s to 100 s of millions of privileges Automatisch Manuel M10 s of thousands of IT Roles IdM Standalone IdM w/ role mining ORM Fragen aus der Praxis: Vorgehensweise? Gültigkeitsbereich?Automatisierungsgrad?

21 Role Mining Privileges : Privileges : Privileges : Privileges : A,C A,B,C B,X,Y A,C,X,Y Role 1 : X, Y Role 2 : A, C Role 3 : B

22 Agenda Einführung: Identity and Access Management Trends im Bereich I&AM: Vom Access Management zum Risiko Management Die Bedeutung von Rollen im User Lifecycle Management Service Orientied Security Was verbirgt sich dahinter? Fragen und Antworten

23 Building Applications Oracle ebus Suite Oracle JDE Siebel / Peoplesoft 3 rd Party Dev. Application SAP Application. Development Design Packaging Management & Administration Runtime Integration Deployment Legend: Authentication Authorization

24 Identity Services Framework Oracle ebus Suite Oracle JDE Siebel / Peoplesoft 3 rd Party Dev. Application SAP Application. Identity Services Framework. Legend: Authentication Authorization

25 Identity Services Framework Oracle Fusion Applications & Middleware 3 rd Party ISF Aware Applications Custom Developed ISF Aware Applications Legacy Applications User Management Authentication Authorization Federation Legacy Integration Interface Connectors, Agents Oracle IAM Suite with Identity Services Framework Service Interfaces WS-*, SPML, SAML, XACML, CARML Identity Services Authentication Provisioning Identity Provider Audit Authorization Administration Role Provider Federation & Trust Enterprise Identity Management Infrastructure Policy & Orchestration Virtualization & User Store

26 Usecase 1: Fusion Identity Administration Fusion Apps Self Registration UI s Application UI s Events & Jobs Application DB s HCM Apps Registration Svcs ValidationSvcs DynRoleLookupSvcs CRM ApprovalSvcs TCA/HR Svcs SCM Notification Svcs PartnerAcctReqSvc CustomerAcctReq Svc NewEmployeeSvc Custom Svcs X Apps SPML Client X AccountRequestSv c RoleReqSvc SuspendAcctSvc PwdValidationSv c Self Registration UI s Role Request/Assignment UI s OIM/ORM PreProcessingSvcs ApprovalSvcs PostApprovalSvcs CompletionSvcs Corporate LDAP

27 Weitere Trends Identity Analytics Berichte und Auswertungen im Drill Down Verfahren Compliance Module Weitere Funktionalitäten im Bereich Audit und Compliance SOA & IA&M (außer das Konzept von SoS) SOA benutzt I&AM ebenfalls als Dienstschicht (bsp. OWSM) I&AM Kundenprojekte benutzen immer mehr SOA Komponenten (bsp. OSB, BPEL, etc) End to End Security Datenbank / Datenhaltung (bsp. DB Proxy User, CUA4DB) Middleware - Usecases (bsp. Portal und SOA)

28 Vielen Dank! Christian Patrascu