INFORMATION STREAMLINES

Transcription

1 INFORMATION STREAMLINES Application-centric Identity Management Oracle Identity Management

2 Make Your Identity Management Application-centric Improved audit and compliance capabilities. Rock-solid security. Reduced administration costs. These are the reasons why organizations embrace identity management. Whether you want to drive down the costs of Sarbanes-Oxley, HIPAA, Basel II, or another of the many regulations your company must comply with or to standardize user security policies and processes, identity management addresses these challenges head-on. But the traditional model of identity management where user identities and privileges are stored in separate, independent identity repositories across the enterprise and identity management is treated as a discrete aspect of systems management is changing. Organizations have realized that bolting identity management onto applications after they have been deployed is more laborintensive, less secure, and increasingly costly, with little hope of providing the levels of user accountability required by the new compliance regulations. Oracle believes that identity management should be application-centric, integrated out of the box with your existing applications, readily deployable for new applications, and architected for a future SOA (service-oriented architecture) application environment. In the SOA environment, identity management will be delivered as a service, so that it can be used by any of your applications (whether Oracle or non-oracle) across the enterprise. Exposing identity management as a reusable service for all applications drives the realization of significant business efficiencies, providing strengthened network security, improved enterprise compliance, and lower administrative and development costs. Many of the world s largest organizations rely on Oracle Identity Management for their identity needs. Find out why.

3 Oracle Internet Directory [part of Oracle Identity Management] allows us to store critical information in one centralized repository for deployment throughout the enterprise. Oracle Internet Directory is rapidly becoming a key component of our infrastructure. Christopher Lundell, Network Engineer, Burlington Coat Factory Oracle Identity Management helps us secure our critical business assets, ensuring that our employees, partners, and customers are securely granted access to what they need, when they need it. Todd Beets, Senior IT Systems Architect, QUALCOMM Oracle s acquisition of Thor and OctetString is a good move. These acquisitions, coupled with Oracle s unique application top-down approach to identity management, will send ripples through the industry. IDC believes that a new phase of identity management is emerging, which weaves the management of user identities directly into the applications themselves so that the service is part of the applications business processes. This applicationcentric approach to IAM should save organizations significant dollars in integration costs, while increasing security and providing business agility. Sally Hudson, Research Manager, Security Products and Services, IDC Mike Neuenschwander, Vice President and Research Director, Burton Group A New Wave of Identity Management To date, identity management has been treated as a discrete aspect of management something bolted onto applications after they have been deployed. It has resembled traditional systems management offerings and has been handled as an extension of them. A new day of identity management is dawning, delivering management of user identities as a service, with applications using the service seamlessly as if it were an integral part of their business processes. Exposing identity management as a reusable service for all applications drives the realization of significant business efficiencies. For example, when identity management is delivered as a service, the new user profiles that are created when employees are first entered into the HR system are the same profiles used to create, approve, and enable those employees companywide system credentials. Their access privileges and appropriate system accounts are determined automatically by their job responsibilities and are all created as part of a single business process. This process is initiated by the HR administrator not by a separate team that synchronizes newly created account information into separate, independent identity repositories to perform account management functions. Whenever the role or employment status of a user is changed by HR, access-privilege changes or termination of access and disabling of accounts occur automatically, based on the defined business process and associated policies. This significantly speeds user account access, streamlines the entire business process, and further drives down administrative costs. Application-centric Identity Management Oracle views identity management as an application management function, not a systems management one, and calls this next wave of identity management application-centric identity management. Application-centric identity management is Integrated out of the box with your business applications, particularly your human resources management system (HRMS), so identity management easily enables the business processes your organization relies on today An integral component of a wider application development and deployment framework that seamlessly works together, so that identity management is always ready for new applications and thus can be rapidly deployed Architected for a future SOA (serviceoriented architecture) application environment, so that as more and more applications are deployed as loosely coupled services, they can rely on a set of standards-based, reusable security services Application-centric Identity Management Oracle Identity Management makes identity management services readily available to applications, developers, and SOA environments.

4 When making our decision to go with an identity management solution, we looked at Oracle and another vendor. Oracle s strong grasp of and focus on identity, as well as its ability to show that in action, made our decision to select Oracle an easy one. Jim McDonald, Manager, Ingersoll-Rand Oracle has an advantage and early lead with its top-down application strategy that is aligned with customer needs. Chris Christiansen, Vice President of Security Products and Services, IDC Implementing a single identity management strategy across the business can help large organizations mitigate security risk and ease compliance pains. This same strategy can benefit growth and expansion strategies for midsize firms as well, as they add more applications and users on a daily basis. Oracle Identity Management helped us secure our critical corporate assets, ensuring that our 2,100 employees, partners, and customers are granted access to what they need, when they need it. Georges Bongard, Project Manager, Swisscom IT Services Oracle Identity Management: Innovative and Distinct Many of the world s largest organizations rely on Oracle for their identity management needs. Oracle s complete identity management suite of offerings, proven capabilities, and innovative approach to managing the identities of users has driven these organizations to standardize on Oracle Identity Management. Several characteristics make Oracle s solution unique in the industry. Application-Driven Oracle is leading the industry in delivering out-of-the-box integration with all leading business applications, including those from Oracle (Oracle E-Business Suite and Oracle s PeopleSoft Enterprise) and SAP. In addition, Oracle is building identity management functions directly into its next generation of packaged business applications, to streamline business processes and improve efficiencies. This effort also involves delivering identity management functions as individual, standards-based services that can be called by SOA applications. Comprehensive, Best-in-Class Suite Oracle leads the industry with an awardwinning suite of identity management offerings that comprise the most comprehensive solution offered by any vendor. With Oracle Identity Management, you benefit from an end-to-end solution that offers proven, best-in-class functionality. And relying on a single vendor to provide industry-leading products and capabilities means less time spent integrating disparate components, a single point of contact for support, a single license contract, and the backing of the world s largest enterprise software company. Hot-Pluggable and Open Oracle Identity Management plugs directly into all major directories, operating systems, portals, application servers, databases, and applications. In fact, an Oracle infrastructure is not required for deploying Oracle Identity Management. It is also open, supporting industry-leading standards such as LDAP, X.509, Liberty, SAML, WS Trust, and WS* that enable easy integration with any other standardscompliant platform or application. Oracle Identity Management Meets Today s Business Needs Oracle Identity Management helps organizations deal with many of the issues and challenges they face as they attempt to respond to increased security threats, wide-ranging compliance initiatives, and rising administrative and development costs. Strengthened Network Security Oracle Identity Management defends an organization from internal threats often the source of the majority of security risks. Applying a centralized security policy to your users and applications ensures a high level of consistency across the entire organization. Uniform user access and rights can be granted from a single repository and removed at a moment s notice, helping prevent the accumulation of orphan accounts and their associated security vulnerabilities. But internal security measures aren t enough customers, partners, and other third parties all demand self-service access to your data. How can you make sure information is available to legitimate users and still ensure its security? Information sharing becomes extremely complex once you need to secure information across enterprise boundaries, such as for business partners, dealers, or outside agencies. Oracle Identity Management lets you set up federated identity management systems, so trusted partners can securely access your applications for example, when a manufacturer wants to supply a product-availability status to retailers or an insurance company wants to share policy information with brokers. A cohesive identity management strategy across applications lets you securely facilitate these exchanges without placing undue strain on IT resources. It also makes it easier to develop and expand business practices, because it is less costly and time-consuming to leverage existing policies and procedures than to create new ones from scratch.

5 An IAM suite requires extranet access management and user provisioning as the two main engines for performing security administration activities. Using a virtual directory can ease the pains of the user provisioning implementation. Linking all of these capabilities to the human resources application, which ultimately could manage both internal employees and the contingent workforce, is a powerful combination. Roberta J. Witty, Research Vice President, Gartner, Inc. Oracle Identity Management was the only solution that provided the advanced identity management functionality to enable us to increase security and drive down the overall cost associated with administering and managing a large user base as well as an application portfolio with complex access control rules. Steve Devoti, Manager of Identity Management, CUNA Mutual Group Oracle Identity Management: A Key to Compliance Oracle Identity Management lets you centrally manage user identities and their access rights for both Oracle and non-oracle applications. This enables your organization to enforce segregation of duties by standardizing user access. Organizations can also restrict access by maintaining tight control over user permissions, privileges, and profile data, and by strictly controlling who has access to what and when. Oracle Identity Management automates access management by providing a workflow process for creation, approval, and issuance of privileges something auditors routinely look for. Finally, organizations can demonstrate controls are in place and working through comprehensive aggregatedaudit and reporting capabilities. Improved Enterprise Compliance Any compliance system requires auditing capabilities that help deter unauthorized user behavior and ensure that authorized users do not abuse their privileges. An organization cannot achieve compliance-level accountability unless it centrally manages user identities and their access rights. To achieve this, organizations need to enforce segregation of duties and restrict access, by maintaining tight control over user permissions, privileges, and profile data and by strictly controlling who has access to what, and when. Oracle Identity Management enforces segregation of duties, automates and manages access, and delivers an aggregated audit and reporting capability. Unlike standalone identity management solutions, Oracle Identity Management is an integral component of the comprehensive Oracle compliance architecture, an interoperable framework of solutions that addresses the wider compliance needs of the entire enterprise. Specifically, Oracle Identity Management addresses these control measures, required by many of the new regulatory compliance initiatives, by doing the following: Enforcing segregation of duties of users, by standardizing user access Restricting access, by maintaining tight control over user permissions, privileges, and profile data, strictly controlling who has access to what, and when Automating access management, by providing a workflow process for creation, approval, and issuance of privileges Demonstrating that controls are in place and working, through audit and reporting capabilities Lower Administrative and Development Costs Although the industry acknowledges that centralized identity management is the goal, most organizations are far from achieving it. Oracle Identity Management allows organizations to manage access to sensitive information and to provision users across a range of disparate systems and applications. Rather than granting access to individual applications in a one-off fashion, Oracle supports policy-based security and single sign-on to applications so users can access multiple applications with one password. This enables enterprise workers to be more productive, even as it reduces the cost of security maintenance and administration. By removing authentication and authorization from individual applications and centralizing it, Oracle Identity Management eliminates duplicated effort across tens to hundreds, even thousands, of applications. The cost savings are not only in the development of these applications but also in the centralized management of user identities and the ability to share administration capabilities by delegating them to line-ofbusiness managers (such as HR managers) who are responsible for those functions. In addition, self-service capabilities such as resetting or recalling passwords eliminates up to 30 percent of incoming help desk calls. A Complete Solution for Identity Management Oracle Identity Management is a member of the Oracle Fusion Middleware family of products, which brings greater agility and decision-making abilities, as well as reduced cost and risk, to diverse IT environments. Oracle Identity Management safeguards information, critical systems, and applications against unauthorized access and use. It is a complete solution that addresses every aspect of identity management: Directory Services Oracle Identity Management supports all leading directories and with the addition of its most recent offering, Oracle Virtual Directory enables multiple LDAP directories or relational databases to look like a single, large, and unified LDAP store. Oracle also offers its own highly scalable Oracle Internet Directory, a full-featured LDAPv3 server implemented on the Oracle Database. Web Access Control and Single Sign-On Web access control improves security, by managing who has access to what information, and when. Single signon delivers dramatic cost savings, by reducing the time spent with thousands of users to address password reset and update issues. Oracle Access Manager and Oracle Enterprise Single Sign-On Suite are market-leading solutions for enterprise identity management. Identity Administration Identity administration helps reduce security risk, by governing how digital identities, groups, and organizations are created, maintained, and leveraged throughout an organization. It does so by providing a simple, controlled means of changing user, role, group, and organization information that dynamically affects access privileges. Oracle Identity Manager includes integrated identity administration.

6 Organizations Rely on Oracle Identity Management Many of the world s largest organizations such as Boeing, British Airways, Charles Schwab, CUNA Mutual Group, FedEx, the French Ministry of Education, General Motors, Ingersoll-Rand, Norsk Hydro, Penn Mutual, the U.S. Federal Reserve, the U.S. Postal Service, and Washington Mutual Bank rely on Oracle Identity Management to meet their identity needs. Federated Identity Federated identity management provides a means of linking internal employees to external portals, or external constituents to internal portals, without the burden of managing their identity and credential information in both places. This drastically reduces the costs and complexity of managing partners users and accelerates adoption of networked business portals. Oracle Identity Federation is the industry s first standalone, simple-to-deploy, fully functional federation server. User Provisioning User provisioning automates the tedious process of adding users to multiple applications and directories and updating and deleting them. As roles, rules, and policies evolve, the rights and attributes of users can change and a workflow-controlled, automated provisioning process can significantly improve the efficiency of managing those changes. Oracle Identity Manager is an industry-leading provisioning solution that helps instantly connect users to the resources they need to be productive, and revokes unauthorized access to protect proprietary information and enhance security. Web Services Management In an SOA, Web services expose business applications and information to the internet for use by customers, business partners, and employees. A robust, secure framework is critical for managing the access control, monitoring, and auditing of these services. Oracle Web Services Manager is at the forefront of the emerging Web services market, providing solutions for serviceenabled identity management and identity-driven SOA management. Identity management is evolving to become increasingly integrated within applications business processes. Oracle is at the forefront of driving this integration into its business applications as well as making it a core component of its application development and deployment framework. To learn more about Oracle Identity Management and its vision of application-centric identity management, please contact your Oracle representative. CONTACT US To learn more about Oracle Identity Management, visit oracle.com/identity. To speak with an Oracle representative, call or

7 Oracle Corporation Worldwide Headquarters 500 Oracle Parkway Redwood Shores, CA U.S.A. Worldwide Inquiries Phone ORACLE1 Fax oracle.com Copyright 2006, Oracle. All rights reserved. Published in the U.S.A. This document is provided for information purposes only, and the contents hereof are subject to change without notice. This document is not warranted to be error-free, nor is it subject to any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. We specifically disclaim any liability with respect to this document, and no contractual obligations are formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without our prior written permission. C Oracle, JD Edwards, PeopleSoft, and Siebel are registered trademarks of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners