The Evolution of Identity Management From IDM to IDMaaS

Transcription

1 The Evolution of Identity Management From IDM to IDMaaS Tom Eggleston

2 Agenda Salford Software Background Identity Management in Universities IDM Managed Service IDMaaS Just IDM Paths to IDMaaS Questions

3 Company Overview SALFORD SOFTWARE

4 Company Background Commercial organisation based in Old Trafford, Manchester Owned by the University of Salford Established professional full t ime st aff Over 400 customers across UK and Ireland including Over 200 Identity Management Solutions Retail, Accounts, Corporate Colleges, Universities RBC s, LA s and Schools NHS, Police, Local and Central government

5 Skills and accreditations Dedicated Account Manager Highly skilled Technical Support Team Professional Service Consultants Strong PRINCE2 certified project managers ISO27001 accreditation ITIL aligned processes

6 Salford Software in numbers

7 Company St rat egy IDM Cloud Product Infrastructure

8 Yes we re on GCloud! Currently listed on Giii Framework Accepted onto Giv Framework Allows public sector organisations to purchase without need for ITT All products listed, including: IDM Managed Service IDM Active Support IDM Consultancy justidm AR MS

9 Salf ord Soft w are IDENTITY MANAGEMENT IN UNIVERSITIES

10 What is Identity Management? Identity Management comprises a suite of technologies which ensure that the right people have the right access to the right data at the right time Automated user provisioning and de-provisioning Access Management Federation Single Sign On Strong Authentication Role Based Access Control Reporting and Compliance

11 An Edge Case for IDM Very large user populations Multiple authoritative sources Very high churn rate Time limited provisioning Heterogeneous environments Overlapping user roles Demanding end users Sound familiar?

12 IDM Mat urit y Model (Gart ner)

13 Traditional Approach to IDM Requirements Capture Design Documentation Solution Development UAT Go-Live Support 9 to 18 Months

14

15 So what? Overly Complex IDM Programme Expensive, Poor ROI Hard to support Insecure

16 Ident it y as a Service New ways of working with Identity Management

17 Salf ord Soft w are IDM MANAGED SERVICE

18 What is IDM Managed Service? Salford Software takes full responsibility for management of customers IDM system Monitoring Maintenance Support Optimisation Improvement Governance Suitable for existing or green-field deployments Supported IDM stacks: NetIQ IDM Microsoft Forefront Identity Manager Open Source IDM Others upon request Available on-premise or hosted (public / private cloud)

19 Why IDM Managed Service? IDM systems are difficult and expensive to manage internally Complex middleware technology; mission critical service Niche skills: business analyst / consultant / developer hybrid Expensive, hard to find, hard to retain Poor management leads to poor stability and availability Security, governance and compliance The right people have the right access to the right systems at the right time Key driver for adoption of IDM systems Compromised by ineffective management of IDM system Traditional consultancy model is inefficient and expensive Typically on-going development is via repeat consultancy engagements Suppliers often cannot guarantee the same consultant across all projects Lack of local knowledge across consultant pool no benefit to the customer from build up of knowledge Each project starts from scratch Supplier / customer disconnect Customer spends a lot of time brokering conversations between supplier and internal system owners / admins Exacerbated by lack of consistent supplier resource

20 IDM Functionality Gap Potential ROI often not achieved in enterprise IDM deployments Limited development of system after Go-Live No benefit from new functionality in new product versions or ancillary products Functionality Gap opens over time eventually a large, expensive project is required to close the gap IDM Managed Service can deliver incremental change so the system keeps pace with technology

21 Service Components Monitor Maintain Optimise Improve Govern Service and support Foundation Advanced Enterprise

22 Service Components - Detail Govern Optimise Service Maintain Monitor Improve Participation Tune OS Monitor and Resolve in Change application support Control OS & IDM based incidents procedures e.g. Identify potential service improvements application usage e.g and new 24/7 Including Apply connections tested performance support CAB coverage functionality and approved to connected trends patches systems Produce Participation Identification monthly in Technical Automatic IDM OS and Managed notification of maintenance, Design application possible Service of optimisation optimisation Authority (TDA) healthchecks errors, outages of IDM and Regular service improvement workshops or code improvement processes Implementation unusual Backup of or service configuration plans performance and restore improvements via Produce Implementation Service change Trend analysis of Service optimisation Delivery control Manager documentation DR and testing Hours benchmarking via Service Hours Quarterly service review meetings Service requests Based or RFCs on Nagios (via Service Hours)

23 Service Level Agreement Severity Level Response Time Resolution Time SLA Severity 1 (S1) 30 minutes 4 hours 95% Severity 2 (S2) 45 minutes 8 hours 96% Severity 3 (S3) 60 minutes 16 hours 96% Severity 4 (S4) 8 hours 3 Days 96% Severity Severity 1 Severity 2 Severity 3 Severity 4 Definition Catastrophic Operational Impact. Complete loss of core service needing immediate attention High Operational Impact. Complete loss of single server or system. Severe impact on core service needing immediate attention. Limited Operational Impact. Limited use of server or system. Instability causing periodic interruption of service. Minimum or No Operational Impact. No instability or interruption of service.

24 Managed Service Approach Year 1 Year 2 Year 3 Stabilise Rationalise Optimise Retire obsolete connectors Implement onboarding Tune Merge connectors healthcheck connectors and recommendations: OS Optimise Reduce for complexity OS performance IDM Connectors Potential cost reduction up to 20%

25 Swansea Universit y - Testimonial Swansea University chose to work with Salford Software as its outsourced managed service provider as they have experience delivering and managing some of the most complicated identity management systems which are present in UK academia. The contract gives us the ability to free up valuable internal resources to work on other critical projects whilst Salford Software manages our IDM service and crucially provides cover at all times Tony Ollier, IT Director, Swansea University

26 Salf ord Soft w are JUSTIDM - IDMAAS

27 JustIDM Simple Cost Effective Quick to deploy Standardised configure not develop No hidden costs justidm is a fully featured yet simple, cloud based IDM solution which delivers all of the benefits of IDM with none of the complexity

28 Password Reset White Pages Student Records System HR System AD Exchange Office365/ Google On-premise Application Cloud Application

29 Just IDM Key Features Identity Management as a Service (IDMaaS) Provisioning of user accounts from the authoritative source (HR syst em) Automated provisioning and de-provisioning of user accounts into Active Directory and an system (Exchange, Office365, Google) Automated provisioning and de-provisioning into additional onpremise or cloud applications Password synchronisat ion Facility to add contract / non-hr st af f via ARMS Password self service Whit e Pages Workflow and delegation facilities (within ARMS) Attestation (within ARMS)

30 Accelerated Deployment Standardised connectors No in-depth analysis required (e.g. design workshops) Customer provides integration is standard format e.g. Dat abase views Text files Standard configuration options just IDM provides a selection of most common options for: Account naming rules address generation Placement Remote deployment All implementation work conducted remotely Limited interaction required with customer staff

31 Total Cost of Ownership Analysis Sector Users Comparative Technology Connectors Contract Length Academic 7,000Staff; 52,000 Students NetIQ Identity Manager 9 5 Years TCO saving of 65% over 5 years Annual TCO - On Premise vs. IDMaaS IDM TCO - On Premise vs. IDMaaS 400, , , , , , , , , , , , , ,000 50, ,000 0 Year 1 Year 2 Year 3 Year 4 Year 5 0 Year 1 Year 2 Year 3 Year 4 Year 5 Annual TCO (On-Premise) Annual TCO (IDMaaS) Cumulative TCO (On-Premise) Cumulative TCO (IDMaaS)

32 Salf ord Soft w are THE PATH TO IDMAAS

33 Pat hways t o IDMaaS Existing IDM System IDM Managed Service Managed Migration IDMaaS No IDM System Accelerated Deployment

34 Salf ord Soft w are QUESTIONS