View
222
Download
0
Category
Preview:
Citation preview
8/12/2019 Identity and Access Mangemant - Dec 2013
1/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
52
-
(IAM/IDM)
:
8/12/2019 Identity and Access Mangemant - Dec 2013
2/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
5 52
,
Round Table IDM IAM.
. "
.
" ."
STKI.
.
.
.
, ,
.
.
.
( \ \ .)
. . IDM" "
.
.
" "
.
.
- .
. " "
,
8/12/2019 Identity and Access Mangemant - Dec 2013
3/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
3 52
..............................................................................................................................3
.....................................................................................................................4
.................................................................4
....................................................................................................7
....................................................................................................8
..............................................................................................01
STKI..................................................................................................................1
..............................................................1
F5.......................................................................................................1
NessPro.............................................................................................0
..................................................................................................3
( IDM/IAM . )
,
, ,
/ " .
SOX , .
, .
.
GRC-.
8/12/2019 Identity and Access Mangemant - Dec 2013
4/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
4 52
:
( ? SSO, PKI ,SIEM)...: IT, " ,HR? , ,
, (
?)
:
.
?
? ? /
ROI?
? ,
?
,
.as411,
71 -81 , .RFP
IDM . ,
- . .
. , .
. .
,IDM. .
.
. , ,
8/12/2019 Identity and Access Mangemant - Dec 2013
5/25
8/12/2019 Identity and Access Mangemant - Dec 2013
6/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
6 52
. ,
- .
DMZ , AD . .
. ,
. , -ROI .
, - ROI .
ROI . ,SOX .
, .
-.
NETIQ- ,
,
.federation ,
.
. IDM ,
." "4 "
, . . IDM , AD. IDM DB
. ,
,
. ,
. .
SECOZ
. , .
. ,
RFP. ,
8/12/2019 Identity and Access Mangemant - Dec 2013
7/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
7 52
,
, .UNIX .
, . SSO . ,
VELO 3 0 11
.
-.
TIVOLI
.
.
SOX-
. .
,
IDM.
IDM
HR,
. 3 .
" .
. .
. , " "
" " , " IT,HR
.
. AVEKSA" .
. " ,
8/12/2019 Identity and Access Mangemant - Dec 2013
8/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
8 52
. . '
.
, SOX , . .
.
, .
, .
.
. SOX
IDM .
. , .
.
, "
-
. provisioning ,HR .-
. .
. .
, . ?
. " HR
.
- IDM" " .
. ,
.
8/12/2019 Identity and Access Mangemant - Dec 2013
9/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
9 52
IT ,
. " 11RFP.
. POC AD , . 4
. . "
,
.
.
" . "
IDM ,
. . , , ,
, " .
" . "
. " .
- , IT
. / .
. .
, .
. .
access management ,
, 1 MF .
.
,
.
8/12/2019 Identity and Access Mangemant - Dec 2013
10/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
1 52
- ,
.
, . .
.
. .
. , .
? ? IT? ,
, " .
" , ?
, . ,
. .
, , . ,
. .
.
01 . SAP ,-.
IDM ,IDM.
, ROLL
.
.
Aveksa
provisioning.
8/12/2019 Identity and Access Mangemant - Dec 2013
11/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
52
.
. PMO ,
. HR , .
117 - 118 IDM.
111ROLLS , MF .
. .
, AD . .TIVOLI .ROLL
. SAP .
SAP.
, .
. .-3
.
. -3 8
. " .
- .
. / ,
. BO . ,
IDM . .
.
. -
.
. ,
.
ROLLS .3
. 00
8/12/2019 Identity and Access Mangemant - Dec 2013
12/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
5 52
.31
. .
. SAP .
.
. 00 IDM .
securenet ,IPSEC,
-SECOZ.
MF IDM , ADMIN
IDM .MF ,provisioning IDMMF .
MF.
MF ,
. . ,
MF,
MF .
, .
IDM - ROLL. agent ? .
" "
, .
, IDM ,
-.
IDM,
.
- IDM .
-. .
8/12/2019 Identity and Access Mangemant - Dec 2013
13/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
3 52
NETIQ .
,
. , , , "
HR, . HR ,
.
IDM HR . .
. SSO. ,
SSONETIQ ? .
?
SSO .
SSO ,
. .
, sandbox ,
, . SSO
. agent , . AD. AD ,
AD . AD.
-
-. .
, workflow.
agent ADLDAP,
:BATCH -
, -
. IDM
, .MF
8/12/2019 Identity and Access Mangemant - Dec 2013
14/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
4 52
IDM. .
.
SSO(single sign on ' .) - .
,BATCH . , .
? ,
SSO . ,
) ( , - .
. SSO :. ,
, ,IDM.
" " ,
. .
. ) ( ,
?
. ,
.
, .
. HR - ?
, .
. HR,
IDM ,ROLLS
IDM.
NETIQ .
. ,
. ,
. , WEB . ,
. .
8/12/2019 Identity and Access Mangemant - Dec 2013
15/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
2 52
: . ,
, .
. , . , , ,
, IT , .
? .
. . : ,
, . SSO
.
,IDM . , .
. .
: .
HR .
.
. ,
,- .
HR . , , . IDM ,
, -
IT. ,
, X? ?
.
. -IT
" .
.
. , -
, .
.
8/12/2019 Identity and Access Mangemant - Dec 2013
16/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
6 52
IDM,access manger
AVEKSA .IDM NETIQ . AD ,SSO . , WEB SSO
IDM .IDM .
, AVEKSA. ,
- .
AVEKSA
ROLL IDM.
IDM workflow . ,
AVEKSA . HR( ,) .
-
HR . ,
.
IDM, HR .
IDM HR . AVEKSA
. ,
. . ,
. . ,
-. ,
- .
.
AD . .
. AD ,SSO.
MF.
8/12/2019 Identity and Access Mangemant - Dec 2013
17/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
7 52
. open source" REDHAT
COVERTIX .VELO . .
. " -
. IT ,HR
, . IDM-
, .
ROLLS . AD .roll mining
THIS . AD ,
ROLLS.
ROLLS . .
, AD
MF IDM . SSO .
,
. .
" " ROLLS . ,01 0 . IDM ,ROLL,
ROLL .
COVERTIX
IDM .
IDM . , , :
,
.IDM , .
-
HR .
.ROI 3
.IDM. ,
8/12/2019 Identity and Access Mangemant - Dec 2013
18/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
8 52
.
- ?
, AD ,IDM API . API .
IDM .HR ,
IDM, HR ,
.
.
.
-IDMprovisioning , IDM
. HR
.
,
.
. -
. "
.IT .
?
: -
?
. AD , AD
.
7 IDM ,
AD .
. ,
8/12/2019 Identity and Access Mangemant - Dec 2013
19/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
9 52
,
. 011%
. , . WOEKFLOW,
. ,
. ,
,
.
NETIQ
, HR .
.
SUN
. 4. , .
. , .
. . ,
. " . "
. . WORKFLOW. .
IDM SUN .
IDM .
IDM ,. .
. ,
. , HR ,HD
, .
-.
- .
, .
8/12/2019 Identity and Access Mangemant - Dec 2013
20/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
51 52
-
.
STKI
F5
, : R.Fogel@F5.com467041711
mailto:R.Fogel@F5.commailto:R.Fogel@F5.commailto:R.Fogel@F5.com8/12/2019 Identity and Access Mangemant - Dec 2013
21/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
5 52
F5 -Single Sign On,
BIG-IP Load Balancing, Application Security,
Acceleration ,Reverse Proxy. - Access Policy Manager ,
, , ( , , "
,) , ,
WAN.
- Access Policy Manager Directory( Active Directory,
eDirectory, LDAP, RADIUS, HTTP Auth, Oracle Access Manager )
, One-Time Password, ,
.
APM Federation SAML 2.0,
( Salesforce,Office365,Google Apps )
, Single Sign-on.
APMCitrix,RDP , -PCoIP
ProxyVMware VDI.
,BIG-IP Access Policy Manager F5 , ,,Single Sign-on
, ,
.
NessPro
' : NetIQ- jackie.abadi@ness.com
NetIQ-noam.shterman@ness.com
NessPRO NetIQ Identity & Access
Governance.
mailto:jackie.abadi@ness.commailto:noam.shterman@ness.commailto:noam.shterman@ness.commailto:jackie.abadi@ness.com8/12/2019 Identity and Access Mangemant - Dec 2013
22/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
55 52
NetIQ (Novell) NetIQ IDM4
SC,-sc-http://www.scmagazine.com/2014
winners/article/334892-us-awards/ ..
, NetIQ
, (Provisioning) "
(Password Policy)
, .
- " ,(Workflow
- HR,)
("Role
"Template.) ,
,
NetIQ .
IDM?
HR IT ( (EOL.
-
- ( HR
) - .
:
ROI- IDM :
Provisioning, , ) ( ROI ,.
(Governance) .
ProvisioningIDM.
http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/8/12/2019 Identity and Access Mangemant - Dec 2013
23/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
53 52
' IDM.
IDM, ROI .
.
NetIQ IDM, ROI.
SSO
SSO(Single Sign On)(Enterprise SSO)
IDM.
NetIQ SSO ,SSO.
NetIQ: Access Manager -: -https://www.netiq.com/products/access
manager /.CloudAccess :
https://www.netiq.com/products/cloudaccess/.
,) ( , , NetIQ , ,
. ,
, ,NetIQ
Access Governance Suite :
suite-governance-https://www.netiq.com/products/access/
: , , :'173 - 6330113 -6033336301
IDM ( , .IDM-AD
https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/cloudaccess/https://www.netiq.com/products/cloudaccess/https://www.netiq.com/products/cloudaccess/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/cloudaccess/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/8/12/2019 Identity and Access Mangemant - Dec 2013
24/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
54 52
) , . 01
0. ? ? ?
2. -1% . 21%! .
3. ?
4..
5.Data Cleaning . , , 6.Role Mining- , .
7. . " ? ? ? ? ?
.:) (
9. /
01.
-Best Practices IDM , , ,
. ,
8/12/2019 Identity and Access Mangemant - Dec 2013
25/25
Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444
52 52
Recommended