CIS13: Identity Bridges and IDaaS: Connecting Users, Internal Applications and Cloud Service...
date post
18-Oct-2014Category
Technology
view
813download
2
Embed Size (px)
description
Transcript of CIS13: Identity Bridges and IDaaS: Connecting Users, Internal Applications and Cloud Service...
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved. Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Identity Bridges and IDaaS: Connecting Users, Internal Applications
and Cloud Service Providers Bob Johnson, Director of IT
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Agenda
Introduction
The Challenge
The Solution
The Results
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
ACCUVANT The Authoritative Source for Information Security
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Accuvant Is
The Authoritative Source for Information Security Accuvant Provides: Comprehensive Set of Services and Solutions For Enterprise-Class Organizations To Plan, Build and Operate Information Security Systems and Programs
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
The Authoritative Source
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
COMPANY GROWTH
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Employee Growth
0
100
200
300
400
500
2009 2010 2011 2012
Num
ber o
f Em
ploy
ees
Accuvant has grown from 170 employees in 2009 to more than 500 today
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Dispersed User Base
2002: Denver, CO Minneapolis, MN 2003: Dallas, TX Phoenix, AZ Sacramento, CA Los Angeles, CA 2004: Salt Lake City, UT Cleveland, OH Chicago, IL
2005: Columbus, OH Orange County, CA San Diego, CA Las Vegas, NV
2006: Santa Barbara, CA Houston, TX 2007: San Francisco, CA Seattle, WA Cincinnati, OH
2008: Portland, OR Miami, FL
2009: Atlanta, GA Kansas City, KS Knoxville, TN Milwaukee, WI
2010: Austin, TX Raleigh, NC Detroit, MI New York, NY Baltimore, MD Richmond, VA Honolulu, HI San Antonio, TX Montgomery, AL
2011: Toronto, Canada St. Louis, MO Boston, MA Indianapolis, IN
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
THE CHALLENGE
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
The Dissolving Perimeter
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
The Dissolving Perimeter
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Managing New Cloud Instances
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Cloud D
Cloud F
Cloud J
Cloud C
Cloud G
Cloud H Cloud I
Cloud B
CloudE
Cloud A
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Frustrating User Experience
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Too Many Systems to Track
Too Many Passwords to Remember
No Integration from Cloud Systems to Internal Systems
Login 40%
Hardware 21%
Questions 27%
Access 12%
Too Many Support Issues
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
THE SOLUTION
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
New Paradigm
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Requirements
Single Sign On for both Cloud and On-Premise Applications
Identity Provisioning across Cloud and On-Premise Applications
No development resources
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Proof of Concept
45 minute setup
SaaS Sandbox
Flawless performance
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Architecture
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Implementation Install on-premises federation server and run as a
windows service
Procure certificates for IDP signing
Install integration kits of on-premises applications
Install connectors for SaaS applications
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Issues URL redirection required an unplanned redirect
site (single sign on url is not a domain name cname wont work with url, must have domain name)
Each SaaS is a little different in how they label or describe fields
Dealing with SaaS support groups was challenging, some wanted us to pay for their professional services.
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Issues
High availability services required the introduction of load balancers
Multiple instances of the same SaaS could not use integration kits (manual configuration)
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
RESULTS
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Accuvant Cloud Desktop
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Results of Implementation
Drop in User Access Issues
Easy Access to Business Applications
Adoption Increased
Dramatically
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Proprietary and Confidential. Do Not Distribute. 2013 Accuvant, Inc. All Rights Reserved.
Bob Johnson 1125 17th Street, Suite 1700, Denver, CO 80202
800.574.0896 [email protected]
www.accuvant.com