Introducing Identity DONG a Case from Antiquity. · Introducing Identity “DONG” a Case from...
Transcript of Introducing Identity DONG a Case from Antiquity. · Introducing Identity “DONG” a Case from...
Introducing Identity“DONG” a Case from Antiquity.
Jon Colombo,20 October 2004
Client orPartner logo
October 2004 -© 2004 Capgemini - All rights reserved
1
AimsPracticalities…
People/Process/Technology Balance
Identity Management Session 3 –Case Study
MethodCase Study
October 2004 -© 2004 Capgemini - All rights reserved
2
Background ...
Politics ...
Model …
Pitfalls…
Lessons
Introduction
October 2004 -© 2004 Capgemini - All rights reserved
3
Date ...
Industry…
Greenfield ...
Location
Background - Situation
October 2004 -© 2004 Capgemini - All rights reserved
4
Background - Aims
Centralise Administration ...
Kill Dangerous Rights Combos ...
A Foundation for Log Analysis
Database
Of
Names &
Groups
Database
Of
Names &
Groups
Database
Of
Names &
Groups
October 2004 -© 2004 Capgemini - All rights reserved
5
Number of Systems ...
Resources ...
State of Market …
Politics
Background - Constraints
October 2004 -© 2004 Capgemini - All rights reserved
6
Background ...
Politics ...
Model …
Pitfalls…
Lessons
Introduction
October 2004 -© 2004 Capgemini - All rights reserved
7
Politics - Constraints
Those who want to stop you...
Those who want you to do their job.…
October 2004 -© 2004 Capgemini - All rights reserved
8
Politics - Role Based Access Control
# Users
Role Complexity
IdealIdeal NormalNormal Us!Us!
Cost
October 2004 -© 2004 Capgemini - All rights reserved
9
Vision!
Politics Counters
Sponsor(s)
Friends ...
Momentum ...
Governance…
Accountants
October 2004 -© 2004 Capgemini - All rights reserved
10
Introduction
Background ...
Politics ...
Model …
Pitfalls…
Lessons
Identity Management Session 3 –Introduction
October 2004 -© 2004 Capgemini - All rights reserved
11
Model
Accounts and Profiles that SHOULD
be there
Accounts and Profiles that ACTUALLYare there
AUTHORISATIONDATA
Records from Administrators
Application Forms
REMOVALDATAHR Records
Door Swipes
Help-Desk
SYSTEMS DATA
SuppliersBureaux
PartnersOperating Systems
Applications
Service Providers
RECONCILE
October 2004 -© 2004 Capgemini - All rights reserved
12
Background ...
Politics ...
Model …
Pitfalls…
Lessons
Introduction
October 2004 -© 2004 Capgemini - All rights reserved
13
Pitfalls –People Records
Processes•Leaving Dates•Contract Negotiations
Leavers InformationTrust
Definition of Staff
October 2004 -© 2004 Capgemini - All rights reserved
14
Pitfalls - Fun With Names
Same NamesName ChangersReturneesPoor TypingPoor Hearing
Acronyms
October 2004 -© 2004 Capgemini - All rights reserved
15
Pitfalls –System Mapping
Depth of ModelSemanticsAdministration StandardsGeneric AccountsRecycling/ConventionsInheritanceEvolution
October 2004 -© 2004 Capgemini - All rights reserved
16
Pitfalls - Operation
Transmission NegotiationTime DependenceTransmission Hiccups•Files Disappear•Updates Stop•Get Reformatted•Content Changes
Sequences
October 2004 -© 2004 Capgemini - All rights reserved
17
Background ...
Politics ...
Model …
Pitfalls…
Lessons
Introduction
October 2004 -© 2004 Capgemini - All rights reserved
18
Lessons - Philosophy
Automate … but incrementallyReport errors only onceBe prepared to throw work away
Adapt to Environment, not Vice Versa
October 2004 -© 2004 Capgemini - All rights reserved
19
Lessons - Applied
AgentsDirty DataSchedulerMeta-layersAnomaliesJournalingAutomate Housekeeping
October 2004 -© 2004 Capgemini - All rights reserved
20
Background ...
Wrap-up
Politics ………
Model ………..
Pitfalls………..
Lessons … ….
www.capgemini.com