Embed Size (px)
Citation preview
Conference 2018
BCNET Identity & Access Management Community of Practice
Shift into the future with predictions for Identity & Access Management
Conference 2018
Panelists:
2
Corey Scholefield
Vera Merkusheva
Isabel Wong
Sabrina da Silva
Banner Schools Colleague Schools
Institutional ERP snapshot
PeopleSoftUNIT4 Finance Custom Solution
Institutional ERP snapshot
Conference 2018 5
Integration libraries
Custom scripts
APIs
Vendor IDAM Solutions
Microsoft Solutions
Identity & Access Mgmt. Solutions
Open-source Solutions
LDAP Directory
Conference 2018 6
Conference 2018 7
Prediction #1 – Access Management Software or Services
Conference 2018 8
¡ Thompson Rivers University Identity Management solutionv IDM is largely manual
v Authoritative Sources for Identities: Banner ERP
v Some access managed through AD groups
v Semi-automated account life cycle triggered by events in Banner, such as student registration, employee hire/termination, etc.
v Automated account provisioning/deprovisioning for a very few systems
v Single set of credentials for the most systems achieved through Single-Sign-On and Same-Sign-On
TRU – Identity Mgmt. Support
Conference 2018
TRU – Identity Mgmt. Support
9
¡ CAS / Shibboleth SSO implementationv Ellucian Ethos Identity (CAS, WS-Federation)
v Banner 8 Applicationsv Banner 9 Applicationsv FAST reportingv SharePoint v eBallot voting (SAAS)
v Shibbolethv Linda.comv BCNET Wikiv DreamSpark
Conference 2018 10
¡ 2010 to 2018
v Identity System of Record: ERP - Bannerv IDM : NetIQ project – started deployment in 2010, finished in
2012 v Business Drivers:
vConsolidate multiple ID’s into single ID vAutomate account life cycle management based on Banner
employment and student registration activitiesvAutomate provisioning of network drives for employees and
students
Langara - Identity Mgmt. Support
Conference 2018
Langara - Identity Mgmt. Support
11
¡ CAS / Shibboleth SSO implementationCAS:
v Home grown IDM account status tool
ADFS/Shib:v Lynda.com
v UPASSv FluidSurveyv SurveyMonkey
v Simplicity Advocatev AWS for student course work
v Email Archivev eScribev RightAnswer KCS
v ..and all future cloud applications
Azure AD:v O365v Dynamics 354 (CRM for IE, coming)
Conference 2018 12
Prediction #2 – IDaaS Access Management Delivery Model
Conference 2018 13
Prediction #3 – Replace Manual Access Certification Requests
Conference 2018 14
Prediction #4 – Data Access Governance
IGA – Identity Governance and Administration
Identity Systems of Record
IdentityMiddleware
Downstream Systems
Ellucian Banner - ERP Continuing Studies - SIS
Active Directory
LDAP
Enterprise Applications
Aggregate Account Info!Provision Directory Entries + Static / Dynamic Groups
NetLink
IDENTITY WAREHOUSE LIFECYCLE MANAGER
AUTOMATED PROVISIONING ACCESS CERTIFICATION
IDENTITY GOVERNANCE PROGRAM
Conference 2018 16
Forecast #1 - Reasons for replacing existing IAM solutions
Conference 2018 17
Forecast #2 - New modules in 2017 to 2018
Conference 2018 18
Questions?
¡ Corey Scholefield [email protected]¡ Vera Merkusheva [email protected]¡ Isabel Wong [email protected]¡ Sabrina da Silva [email protected]
