Multi-Factor Authentication

Transcription

1 Executive Summary Dne: 1. We have cncluded the Prf f Cncept Testing and nw are mving frward with Full Life Cycle Testing. 2. Purchasing: We are mving frward with Symantec VIP prduct and fbs. We are wrking with the reseller t finalize the cntract. 3. Prject Timeframe Update: We have decided t pstpne the starting f full life cycle testing t secnd week f September with internal testing grup and frth week f September with external testing grup (see Appendix A fr details). Pstpning full life cycle testing t September allws ur develpers t have enugh time t develp fully functinal sites and better training material; hence, prvides ur testers a smth and better testing experience. The target date fr early adpter phase is als pstpned t secnd r third week f Octber. Our target date fr cmpleting the prject remains unchanged: December 15, Full Life Cycle Testing Planning: See Appendix A fr planning details. 5. Early Adpter Phase Update: a. Participants: i. All f Service Center (120) ii. UW Whitewater iii. UW Eau Claire iv. UW Milwaukee 1. Subset wuld be preferable. The prject team will wrk with UW Milwaukee t identify specific units fr the early adpter phase. v. DIT vi. UWSA b. Time: secnd t third week f Octber T D: 1. Draft plicy statements fr using smart phnes as OTP device 2. Detail cmmunicatin will be send t HR Directrs f full life cycle testing external grup by the end f September 4 th t identify testers 3. Detail cmmunicatin will be send t HR Directrs f early adpter grup by the end f September 4 th 4. Schedule nline training fr full life cycle testing grups 5. Develp training material 1

2 Tentative High-level Timeframe Abslute deadline fr HRS implementatin (all campuses) is December 15, Activities between nw and December 15 have flexible target dates: Activity Target Date Nte 1. Prf f Cncept (POC) and User Review 2. Full life-cycle testing at the end f POC 3. Training fr early adpter grup August 13 September 9 th thrugh September 27th Late September 4. Early Adpter Secnd r Third week f Octber Dne Secnd week f September: Internal Grup Furth week f September: External Grup We need t be sensitive t campus s LRA s wrklad at the beginning f the semester. Training will be prvided t Users, LRAs, and Help Desks. We want t identify 2-3 small t mid-size campuses fr the early adpter phase. The size f the campus is determined by the number f HRS Cre Users that a campus has t supprt. 1. A mid-size campus: 100 r mre HRS Cre Users 2. A small-size campus: Less than 100 HRS Cre Users UW System has expressed its interest t be ne f the pilt campuses. 5. Training fr all campuses End f Octber, Early Nvember 6. Rll Out Nvember thrugh December Nte that the early adpter date is the date that the Users frm early adpter campuses are required t use either the hard-tken r mbile device as the secnd factr t authenticate t HRS. The issuance f the device shuld happen prir t the pilt date. If requested, the prject team will facilitate campuses (at the lcal campus lcatin) that need help during the initial issuance prcess. The training will be prvided via WebEx. Depending n the utcme f the Early Adpter phase, we may rll ut multi-factr authenticatin t all ther campuses at nce r ding a staggered apprach. 2

3 15 Nte that the deplyment date is the date that the Users are required t use either the hard-tken r mbile device as the secnd factr t authenticate t HRS. The issuance f the device shuld happen prir t the deplyment date. If requested, the prject team will facilitate campuses (at the lcal campus lcatin) that need help during the initial issuance prcess. Prject Management Prject management is respnsible fr identifying and tracking prject tasks; identifying ptential dependencies that impact the deliverables; cmmunicate prject status and manage prject dcumentatin (charter, requirements, plans etc.) Cmpleted Activities Send invitatin letters t CIOs and HR Directrs f the ptential early adpter grup (UW Milwaukee, Whitewater, Eau Claire) Cmplete full life cycle testing planning Received apprval t mve frward with Symantec VIP prduct and fb purchase Onging/Upcming Activities Cntinue wrking n the FAQ page Wrk with reseller t finalize the cntract Applicatin Integratin and Deplyment This tier is respnsible fr develping and reviewing prcesses, verifying requirements, testing and supprt during pilt and deplyment phases. Cmpleted Activities IAM-TAG presented the Integratin Scenaris fr OTP vendrs Onging/Upcming Activities Participate with vendr reviews UW-Digital ID UW-Digital ID is respnsible fr designing, dcumenting and prviding training n issuance, maintenance and supprt f Tkens. Cmpleted Activities Cmpleted develpment wrk fr the POC User Review sessins Onging/Upcming Activities Plan fr full-life cycle testing 3

4 Middleware / IAM Middleware is respnsible fr building the agreed upn business slutin nce apprved by the Multi-Factr Authenticatin gverning bdies. Cmpleted Activities Cmpleted develpment wrk fr POC User Review Sessins Onging/Upcming Activities Plan fr full-life cycle testing Wrk with DIT Security, System Engineering and HRS test teams t make sure that HRS envirnments are functining prperly with IAM s wrk n this prject Prject Dependencies Purchasing an OTP slutin Slutin functinality n prviding a temprary frm-factr fr cntingency access Custmer s participatin in cmmunicatin prcess 4

5 Prject Gvernance Structure Executive Cmmittee Prject Spnsr Lrie Dcken Jhn Krgman Prject Lead Chris Liechty Stefan Wahe Prject Manager Ching-tzu Chien Al Crist Julie Grdan Larry Hendersn Custmer Key Stakehlders CIO Cuncil (Lrie Dcken) HRS Functinal Supprt (Larry Hendersn, Mike Gllmar, Brad Bruegger, Rachel Hlmquist) SFS Cntrlers (Julie Grdn) UW-TISC (Chris Liechty) UW-MIST (Stefan Wahe) ISIS MMT (Ilene Seltzer) OCIS (Jim Lwe) ITLP Prject Team (Jeff Savy, Mike Gllmar) IAM Steering Cmmittee (Elena Pkt) Purchasiing Ruth Ginzberg End User HRS, SFS, and ther ptential cmmn system users Vendr Team Lead Stefan Wahe Jhn Ktlski Nick Davis Jsh Campbell Team Lead SFS Jsh Campbell Jhn Ktlski Stefan Wahe Team Lead HRS Service Center Jhn Ktlski Brad Krause Derrian Jnes Mike Gllmar Team Lead Ty Lett Mike Rszkwski Bb Stensn Jeremy Sctt Ryan Larscheidt Mark Weber Team Lead Je Tarter Nick Davis Chris Spencer Andrew Hffmann Other Supprt Training Cmmunicatin HRS(Tim Miller, Jhn Ktlski, Diane BlaskwSki) SFS (Ben Integratin Design Team IAM Technical Advisry Team (Tm Jrdan) IAM Supprt Team (Ty Lett) UW-Digital ID (Chris Spencer) Service Owner UW-Digital ID (Je Tarter) DIT Security Applicatin Supprt/Security IAM Prject Team UW-Digital ID Other Prject Dcumentatin All prject dcumentatin (prject plan, status reprt, meeting ntes, etc) is stred in the prject s wiki site ( Factr+Authenticatin+Hme). The site serves as the fficial surce f prject infrmatin. All prject stakehlders except fr thse wh d nt have wiki accunts have been granted site access. These individuals need t lgin t at least nce t have their wiki accunt created. Prject Charter: 5

6 Cmmunicatin Plan: Appendix A: Full Life Cycle Planning Testing and Early Adpter Grups and Majr Milestnes fr these Grups: Internal Team: 2nd week f September DIT Security Middleware UWSA (2) External Team: 4th week f September Service Center QA & Test Users (~30) Internal Team (~20) Eau Claire (2-3) Subset f Milwaukee (2) ADI (15-20) Early Adpter: 2nd-3rd week f Octber All f Service Center (120) Whitewater Eau Claire Milwaukee (280) Subset wuld be preferable DIT UWSA Envirnment fr each phase: HRS SHIB Prd QA Test Dev Internal Early Adpter External <---Internal <--External Internal External Early Adpter UWDID External Internal 6

7 Activities List: Purchasing Fbs: Early Adpter Order in by 8/27 t 1st week f September Cmmunicatin Plan 1. HR Directrs f Full Life Cycle Testing campuses: Send ut by Wednesday, September 4th 2. HR Directrs f Early Adpters Send ut by Wednesday, September 4th Training 1. Training Materials Fr end users and LRAs Drafted by 3rd week f September (fr External grup) Reviewed by users Finalize 2. Online Training Internal: Early 2nd week f September External: 3rd week f September OIM Mdificatin Cmpliance language: dne by secnd week f September: assigned t Jay Sundu and Jhn K Plicy Statements - Ching-tzu Draft dne by 09./04 reviewed by CIO plicy department reviewed by spnsrs finalize by 2nd week f September 7

8 Other Actin Items List f users fr External Grup (need bth Cre Users and nn-cre Users) frm Mike G and Jhn by Wed, August 28 Identify LRA (2 peple) fr the service center - Mike G and Chris S - need this befre external grup testing 8