Hitachi ID Management Suite Demo

1

ID Management Suite Demo

Managing the User Lifecycle Across On-Premises and Cloud-Hosted Applications

Using automation and self-service to secure and automate user and entitlement management.

Š 2012 Hitachi ID Systems, Inc.. All rights reserved.

1

Slide Presentation

2

HiIM Features Automation: • Provision joiners, deactivate leavers.

• Multiple HR feeds.

Requests portal: • Self-service profile updates.

• Delegated security change requests.

Security controls: • Access certification.

• RBAC and SoD. • Reports on current entitlements, history.

Workflow process: • Authorizers.

• Implementers.

• Certifiers.

Integrations: • 110+ connectors, included.

• Incident management, SIEM, e-mail interfaces.

• Manage building access, physical assets.

Identity synchronization: • Consistent data among apps.

© 2012 Hitachi ID Systems, Inc.. All rights reserved.

2

Slide Presentation

3

Access Certifier Features

Hitachi ID Access Certifier automates periodic audits of all users and their access rights: • Orgchart integration: – Managers are reminded to review their direct subordinates.

• Certification: – Each manager’s review is completed by an electronic signature, to certify that remaining entitlements are appropriate.

• Completion: – Managers are motivated to complete the audit, since failure to do so prevents their superiors’ own audits.

• Roll-up: – At the end of the process, executives can attest to appropriate entitlements enterprise-wide.

© 2012 Hitachi ID Systems, Inc.. All rights reserved.

3

Slide Presentation

4

HiPM Features Password synch: • Reduce the number of passwords per user.

Self service: • • • • •

Password reset.

Clear lockout.

Smart card PIN reset.

Token PIN reset.

HDD key recovery.

Access from: • PC browser or login screen.

• At the office or remote.

• Smart phone or voice call.

Assisted service: • Password, token PIN, intruder lockout.

Policy enforcement: • Password complexity, expiry, history.

• Non-password authentication.

Managed enrollment: • Security questions.

• Login IDs. • Mobile phone numbers.

© 2012 Hitachi ID Systems, Inc.. All rights reserved.

4

Slide Presentation

5

Enabling Technologies

Hitachi ID Identity Manager includes technology that enables deployment in real-world, complex organizations:

Challenge Diversity of login systems.

Technology 110 connectors built-in.

Different, disconnected login IDs.

Auto-discovery, automatic and self-service reconciliation.

Dynamic workflow: a single, parametric process used to authorize all change types.

Thousands of change request types.

No pre-existing model associating users with roles, roles with entitlements.

6

Functional without a role model: users can request resources directly. Access Certifier available to find, remove inappropriate rights.

Impact Easy to integrate with existing infrastructure Efficient processes to discover and connect login IDs. Significantly reduces setup and maintenance effort for request forms and change approvals.

Get to production without waiting for a role mining project to complete.

Enabling Technologies

Hitachi ID Password Manager includes technology that enables deployment in real-world, complex organizations:

Challenge Many systems and apps.

Forgotten primary password.

Inconsistent login IDs. Security question data.

Too many login prompts.

Technology 110 connectors built-in.

SKA, WinXP/GINA, Win7/Cred Provider, IVR. Auto-discovery, auto-mapping, self-service mapping.

Automated enrollment process, built-in forms.

Hitachi ID Login Manager auto-populates ID/PW.

Impact Rapid, broad integration.

Self service available at OS login prompt.

Rapid deployment, minimal consulting.

Rapid deployment, high user adoption Fewer IDs/PWs to type.

Š 2012 Hitachi ID Systems, Inc.. All rights reserved.

5

Slide Presentation

7

Enabling Technologies (2) Challenge Seamless integration with corporate IT. Cached domain PWs. Intruder lockouts after web PW change.

Mobile users: forgotten PW.

8

Technology Embeddable, customizable UI. Call tracking and e-mail integration.

ActiveX in Hitachi ID Password Manager UI refreshes cached PW. SSPR over temporary VPN.

Impact Easily ties in with portal, help desk and other systems.

Eliminate lockouts.

Business continuity.

Lower help desk call volume.

Enabling Technologies (3) Challenge Smart cards: forgotten PIN, lost card.

Tokens: forgotten PIN, lost token.

Full disk encryption: forgotten key.

Require multi-factor authentication.

Technology PIN reset, backup passwords.

PIN reset, emergency pass-code.

Self-service key recovery.

Authentication chains.

Impact Business continuity.

Lower help desk call volume. " " Example: PIN via SMS followed by security questions.

Š 2012 Hitachi ID Systems, Inc.. All rights reserved.

6

Slide Presentation

9

Closed Loop IAM

Integrated Systems of Record

Hitachi ID Management Suite List people

Auto discovery

Detected changes Auto-provisioning Identity synch.

Updates

Manual request

Requests Web UI

Updates

Invitations

Authorizers

Approve, reject, delegate

Approvals Web UI

- Validate requests - Route for approval - Invite authorizers - Send reminders - Escalate - Delegate Request Queue

Autofulfillment Work Queue

Manual fulfillment

Connectors

Review, certify, correct

Transaction Manager

Create, delete, update accounts

Invitations

Invitations

Certifiers

Non-integrated Systems

Create, delete, update accounts

Identity Cache

Automatic request

Requesters

Integrated Target Systems

List accounts

Certification Web UI

Workflow Manager

Implementer Web UI

Accept, confirm

Implementers

Š 2012 Hitachi ID Systems, Inc.. All rights reserved.

7

Slide Presentation

10

Multi-Master Architecture , nix , U 90, D 3 A S/ P, O DA 0 d e L S40 tiv or Na assw ge A p han Password c Synch Trigger Systems

User

IVR Server

VPN Server

Reverse Web Proxy

lid Va

Load Balancer

SMTP or Notes Mail

Various Protocols Secure Native Protocol HTTPS

PW

Hitachi ID Application Server(s)

Target Systems with local agent: OS/390, Unix, older RSA

Target Systems with remote agent: AD, SQL, SAP, Notes, etc

s ce rvi Se b We

SQL DB

ails Em

TCP/IP + AES

ate

SQL DB

SQL/Oracle

ts ke Tic

& Incident up ok Management Lo System System of Record

Firewall

g Tri

, ted os s h ud app Clo aaS S

ca Lo

etw lN

ork

Target Systems

r ge

m Re

Firewall

ot

n Ce a t a eD

ter

Proxy Server (if needed)

Š 2012 Hitachi ID Systems, Inc.. All rights reserved.

8

Slide Presentation

11

Included Connectors

Many integrations to target systems included in the base price:

12

Directories: Any LDAP, AD, WinNT, NDS, eDirectory, NIS/NIS+.

Servers: Windows NT, 2000, 2003, 2008, Samba, Novell, SharePoint.

Databases: Oracle, Sybase, SQL Server, DB2/UDB, Informix, ODBC.

Unix: Linux, Solaris, AIX, HPUX, 24 more.

Mainframes, Midrange: z/OS: RACF, ACF2, TopSecret. iSeries, OpenVMS.

HDD Encryption: McAfee, CheckPoint.

ERP: JDE, Oracle eBiz, PeopleSoft, SAP R/3 and ECC 6, Siebel, Business Objects.

Collaboration: Lotus Notes, Exchange, GroupWise, BlackBerry ES.

Tokens, Smart Cards: RSA SecurID, SafeWord, RADIUS, ActivIdentity, Schlumberger.

WebSSO: CA Siteminder, IBM TAM, Oracle AM, RSA Access Manager.

Help Desk: BMC Remedy, SDE, HP SM, CA Unicenter, Assyst, HEAT, Altiris, Track-It!

Cloud/SaaS: WebEx, Google Apps, Salesforce.com, SOAP (generic).

Simple Integration with Custom Apps • ID Management Suite easily integrates with custom, vertical and hosted applications using flexible agents .

• Each flexible agent connects to a class of applications: – – – – – – – –

API bindings (C, C++, Java, COM, ActiveX, MQ Series).

Telnet / TN3270 / TN5250 / sessions with TLS or SSL. SSH sessions.

HTTP(S) administrative interfaces.

Web services.

Win32 and Unix command-line administration programs.

SQL scripts.

Custom LDAP attributes.

• Integration takes a few hours to a few days.

• Fixed cost service available from Hitachi ID.

© 2012 Hitachi ID Systems, Inc.. All rights reserved.

9

Slide Presentation

13

Demo

14

Corporate Overview

14.1

Hitachi ID Corporate Overview

Hitachi ID is a leading provider of identity and access management solutions.

• • • • •

Founded as M-Tech in 1992.

A division of Hitachi, Ltd. since 2008.

Over 900 customers.

More than 11M+ licensed users.

Offices in North America, Europe and APAC. • Partners globally.

© 2012 Hitachi ID Systems, Inc.. All rights reserved.

10

Slide Presentation

14.2

Hitachi ID Value Proposition

Š 2012 Hitachi ID Systems, Inc.. All rights reserved.

11

Slide Presentation

14.3

Hitachi ID Advantages

14.4

Representative Hitachi ID Customers

500, 1401 - 1 Street SE, Calgary AB Canada T2G 2J3 Tel: 1.403.233.0740 Fax: 1.403.233.0725 E-Mail: sales@Hitachi-ID.com

www.Hitachi-ID.com

File: PRCS:pres Date: March 1, 2012