Identity and Access Mangemant - Dec 2013

8/12/2019 Identity and Access Mangemant - Dec 2013

1/25

Moshav Bnei Zion P.O.Box 151 60910 Israel Tel. 972-9-7907000 Fax. 972-97442444

52

-

(IAM/IDM)

:


2/25


5 52

,

Round Table IDM IAM.

. "

.

" ."

STKI.

.

.

.

, ,

.

.

.

( \ \ .)

. . IDM" "

.

.

" "

.

.

- .

. " "

,


3/25


3 52

..............................................................................................................................3

.....................................................................................................................4

.................................................................4

....................................................................................................7

....................................................................................................8

..............................................................................................01

STKI..................................................................................................................1

..............................................................1

F5.......................................................................................................1

NessPro.............................................................................................0

..................................................................................................3

( IDM/IAM . )

,

, ,

/ " .

SOX , .

, .

.

GRC-.


4/25


4 52

:

( ? SSO, PKI ,SIEM)...: IT, " ,HR? , ,

, (

?)

:

.

?

? ? /

ROI?

? ,

?

,

.as411,

71 -81 , .RFP

IDM . ,

- . .

. , .

. .

,IDM. .

.

. , ,


5/25


6/25


6 52

. ,

- .

DMZ , AD . .

. ,

. , -ROI .

, - ROI .

ROI . ,SOX .

, .

-.

NETIQ- ,

,

.federation ,

.

. IDM ,

." "4 "

, . . IDM , AD. IDM DB

. ,

,

. ,

. .

SECOZ

. , .

. ,

RFP. ,


7/25


7 52

,

, .UNIX .

, . SSO . ,

VELO 3 0 11

.

-.

TIVOLI

.

.

SOX-

. .

,

IDM.

IDM

HR,

. 3 .

" .

. .

. , " "

" " , " IT,HR

.

. AVEKSA" .

. " ,


8/25


8 52

. . '

.

, SOX , . .

.

, .

, .

.

. SOX

IDM .

. , .

.

, "

-

. provisioning ,HR .-

. .

. .

, . ?

. " HR

.

- IDM" " .

. ,

.


9/25


9 52

IT ,

. " 11RFP.

. POC AD , . 4

. . "

,

.

.

" . "

IDM ,

. . , , ,

, " .

" . "

. " .

- , IT

. / .

. .

, .

. .

access management ,

, 1 MF .

.

,

.


10/25


1 52

- ,

.

, . .

.

. .

. , .

? ? IT? ,

, " .

" , ?

, . ,

. .

, , . ,

. .

.

01 . SAP ,-.

IDM ,IDM.

, ROLL

.

.

Aveksa

provisioning.


11/25


52

.

. PMO ,

. HR , .

117 - 118 IDM.

111ROLLS , MF .

. .

, AD . .TIVOLI .ROLL

. SAP .

SAP.

, .

. .-3

.

. -3 8

. " .

- .

. / ,

. BO . ,

IDM . .

.

. -

.

. ,

.

ROLLS .3

. 00


12/25


5 52

.31

. .

. SAP .

.

. 00 IDM .

securenet ,IPSEC,

-SECOZ.

MF IDM , ADMIN

IDM .MF ,provisioning IDMMF .

MF.

MF ,

. . ,

MF,

MF .

, .

IDM - ROLL. agent ? .

" "

, .

, IDM ,

-.

IDM,

.

- IDM .

-. .


13/25


3 52

NETIQ .

,

. , , , "

HR, . HR ,

.

IDM HR . .

. SSO. ,

SSONETIQ ? .

?

SSO .

SSO ,

. .

, sandbox ,

, . SSO

. agent , . AD. AD ,

AD . AD.

-

-. .

, workflow.

agent ADLDAP,

:BATCH -

, -

. IDM

, .MF


14/25


4 52

IDM. .

.

SSO(single sign on ' .) - .

,BATCH . , .

? ,

SSO . ,

) ( , - .

. SSO :. ,

, ,IDM.

" " ,

. .

. ) ( ,

?

. ,

.

, .

. HR - ?

, .

. HR,

IDM ,ROLLS

IDM.

NETIQ .

. ,

. ,

. , WEB . ,

. .


15/25


2 52

: . ,

, .

. , . , , ,

, IT , .

? .

. . : ,

, . SSO

.

,IDM . , .

. .

: .

HR .

.

. ,

,- .

HR . , , . IDM ,

, -

IT. ,

, X? ?

.

. -IT

" .

.

. , -

, .

.


16/25


6 52

IDM,access manger

AVEKSA .IDM NETIQ . AD ,SSO . , WEB SSO

IDM .IDM .

, AVEKSA. ,

- .

AVEKSA

ROLL IDM.

IDM workflow . ,

AVEKSA . HR( ,) .

-

HR . ,

.

IDM, HR .

IDM HR . AVEKSA

. ,

. . ,

. . ,

-. ,

- .

.

AD . .

. AD ,SSO.

MF.


17/25


7 52

. open source" REDHAT

COVERTIX .VELO . .

. " -

. IT ,HR

, . IDM-

, .

ROLLS . AD .roll mining

THIS . AD ,

ROLLS.

ROLLS . .

, AD

MF IDM . SSO .

,

. .

" " ROLLS . ,01 0 . IDM ,ROLL,

ROLL .

COVERTIX

IDM .

IDM . , , :

,

.IDM , .

-

HR .

.ROI 3

.IDM. ,


18/25


8 52

.

- ?

, AD ,IDM API . API .

IDM .HR ,

IDM, HR ,

.

.

.

-IDMprovisioning , IDM

. HR

.

,

.

. -

. "

.IT .

?

: -

?

. AD , AD

.

7 IDM ,

AD .

. ,


19/25


9 52

,

. 011%

. , . WOEKFLOW,

. ,

. ,

,

.

NETIQ

, HR .

.

SUN

. 4. , .

. , .

. . ,

. " . "

. . WORKFLOW. .

IDM SUN .

IDM .

IDM ,. .

. ,

. , HR ,HD

, .

-.

- .

, .


20/25


51 52

-

.

STKI

F5

, : [email protected]
mailto:[email protected]:[email protected]:[email protected]


21/25


5 52

F5 -Single Sign On,

BIG-IP Load Balancing, Application Security,

Acceleration ,Reverse Proxy. - Access Policy Manager ,

, , ( , , "

,) , ,

WAN.

- Access Policy Manager Directory( Active Directory,

eDirectory, LDAP, RADIUS, HTTP Auth, Oracle Access Manager )

, One-Time Password, ,

.

APM Federation SAML 2.0,

( Salesforce,Office365,Google Apps )

, Single Sign-on.

APMCitrix,RDP , -PCoIP

ProxyVMware VDI.

,BIG-IP Access Policy Manager F5 , ,,Single Sign-on

, ,

.

NessPro

' : NetIQ- [email protected]

[email protected]

NessPRO NetIQ Identity & Access

Governance.
mailto:[email protected]:[email protected]:[email protected]:[email protected]


22/25


55 52

NetIQ (Novell) NetIQ IDM4

SC,-sc-http://www.scmagazine.com/2014

winners/article/334892-us-awards/ ..

, NetIQ

, (Provisioning) "

(Password Policy)

, .

- " ,(Workflow

- HR,)

("Role

"Template.) ,

,

NetIQ .

IDM?

HR IT ( (EOL.

-

- ( HR

) - .

:

ROI- IDM :

Provisioning, , ) ( ROI ,.

(Governance) .

ProvisioningIDM.
http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/http://www.scmagazine.com/2014-sc-awards-us-winners/article/334892/


23/25


53 52

' IDM.

IDM, ROI .

.

NetIQ IDM, ROI.

SSO

SSO(Single Sign On)(Enterprise SSO)

IDM.

NetIQ SSO ,SSO.

NetIQ: Access Manager -: -https://www.netiq.com/products/access

manager /.CloudAccess :

https://www.netiq.com/products/cloudaccess/.

,) ( , , NetIQ , ,

. ,

, ,NetIQ

Access Governance Suite :

suite-governance-https://www.netiq.com/products/access/

: , , :'173 - 6330113 -6033336301

IDM ( , .IDM-AD
https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/cloudaccess/https://www.netiq.com/products/cloudaccess/https://www.netiq.com/products/cloudaccess/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/access-governance-suite/https://www.netiq.com/products/cloudaccess/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/https://www.netiq.com/products/access-manager/


24/25


54 52

) , . 01

0. ? ? ?

2. -1% . 21%! .

3. ?

4..

5.Data Cleaning . , , 6.Role Mining- , .

7. . " ? ? ? ? ?

.:) (

9. /

01.

-Best Practices IDM , , ,

. ,


25/25


52 52

Documents

Identity and Access Mangemant - Dec 2013