Identity management delegation and automation

14
Lotusphere Comes To You 2007 Identity Management Delegation and Automation Bill Buchan hadsl

description

The presentation "Identity Management Delegation & Automation" was presented at Lotusphere Comes to You - hosted by Triangle, in Mimstead, London and Warrington during February and March 2007. This presentation explains how real cost savings and resource savings can be made bu automating your ID and resource management, and what you might spend those cost savings on.

Transcript of Identity management delegation and automation

Page 1: Identity management delegation and automation

Lo tus p he re C o m e s To Yo u2 0 0 7

Identity Management Delegation and Automation

Bill Buchanhadsl

Page 2: Identity management delegation and automation

Identity Management Delegation and Automation

IntroductionsThe WhyThe HowBest PracticesHow to utilise the cost savingsQ+A

Page 3: Identity management delegation and automation

Introductions

• I am Bill Buchan° Director, HADSL° Long term Lotus Partner° Dual PCLP – v3 – v7° Long term consulting for very large notes customers.° I speak at Lotusphere.

Page 4: Identity management delegation and automation

Introductions

• You are° Lotus Domino Customers° Being squeezed on all sides with cost cutting° Being expected to deliver more services with less staff.° Sarbanes/Oxley and/or FSA regulatory framework.

• How can we help?° Lets look at Automating and Delegating user management..

Page 5: Identity management delegation and automation

Why Delegate & Automate ?

• You have multiple authentication directories° Usually Domino, Active directory, BlackBerry.

• You have a normal staff turnover rate° Around 10%.

• Your support staff and your specialists are being cut• Your business want more control• Your business wants faster response.

° “%100 First time fix” SLA.° ID’s within 1 working day

Page 6: Identity management delegation and automation

Why ? #2

• Yet:° More Sophisticated applications, requiring more interconnection.° More directories, and more services reliant on them.° Demands for:

• More security, yet faster turnaround.• Business users to manage directories.

Page 7: Identity management delegation and automation

Why #3

• What is the cost saving ?° Metrics dictate:

• 1,000 – 1,500 users per administrator• 15-20 servers per administrator

• Post installation, expect to see:° 10,000-15,000 users per administrator.

• We predict in a large environment (>3,000 users)° A 75% reduction in effort.° ROI in less than four months.° Releases resource for new projects.

Page 8: Identity management delegation and automation

How ?

• A “proxy administration” tool:° Provides a secure “proxy” between user and security subsystem° Completely automates complex tasks° Enforces naming standards° Enhances security.° Supports main directories° Gives a programmatic interface to these processes

• Allows you to interface to HR systems, etc.

Page 9: Identity management delegation and automation

How do I pick one ?

• Pick one that:° is easy to use – zero training budget° is easy to configure° supports the transactions you require° supports the directories you use° enhances security° Is version and platform agnostic

• Do you have a recommendation?° Well…..

Page 10: Identity management delegation and automation

Demo

A quick demo of the User Experience

Page 11: Identity management delegation and automation

Best Practices

• Decide on your policies, standards, procedures FIRST.• Only allow a handful of administrators complete access• Lock your directories down• Produce Audit, Billing logs and provide them to Compliance• Roll out to 1st level helpdesk first• Once your happy, push it out into the enterprise

Page 12: Identity management delegation and automation

How to utilise the cost savings

• Upgrade to ND7° 30% faster than six.° More policy management, lockdown, client updates.° Ready for ND8 upgrade.

• Release resources to support new products

Page 13: Identity management delegation and automation

Summary

• A quick, scalable solution to reducing administrative burden• Increases security• Increases service response.

° Days -> 15 minutes• Pushes effort down to non-specialists

° Without loss of control.° With more compliance, monitoring, auditing.

Page 14: Identity management delegation and automation

Questions and Answers?

• hadsl web site: http://www.hadsl.com• Personal Blog: http://www.billbuchan.com• Irish Lotus Notes User Group (ILUG): http://www.ilug2007.org