Upload
imogen-jacobs
View
221
Download
0
Tags:
Embed Size (px)
Citation preview
Energy Ecosystem
Overview
David Miller
Chief Security Officer
Covisint Summary
“In a league of their o
wn with no
direct competitors” – ID
C Research
“In a league of their o
wn with no
direct competitors” – ID
C Research
World’s Largest, Global B2B Ecosystem• Automotive• Energy• Financial Services• Healthcare• Travel
Global Business:• Detroit (MI)• Frankfurt (Germany)• Shanghai (China)
Analyst Recognition: “Covisint has been a visionary in
leveraging the cloud” – Gartner
“Covisint has been a visionary in
leveraging the cloud” – Gartner
$800 million investment
18,000,000+ Identities
Issues in Energy Industry
Visibility Trust Compliance
Technology Cost Change UserExperience
Issues in Energy Industry
Visibility Trust Compliance
Technology Cost Change UserExperience
Issues in Energy Industry
Visibility Trust Compliance
Technology Cost Change UserExperience
Visibility Trust Compliance
Technology Cost Change UserExperience
IdentityLifecycle
Management
FederationManagemen
t
Audit andAttestation
Brokeringand
ProtocolTrans
SSO, Portals andDashboards
SaaS -Always up
to Date
SaaS -Lower TCO
Energy Industry Solution
Shell Oil
JointVentures
Contractors
BusinessPartners
Employees
ExecutiveLeadership
Suppliers
Shell OilEcosystem
Challenges:
Diverse, loosely coupled workforce with
special identity and security requirements.
Need to provide provisioning services for
~ 750,000 identities of contractors and joint
ventures
Goal = Institute highly secure provisioning
throughout extended workforce
Results:
Quick provisioning and de-provisioning
Improved security and auditing
Better security visibility across contractors and joint ventures
How Covisint helped Shell?
Phase I: Implement Basic Identity Lifecycle Management• Single point of administration for JV’s, partners, suppliers, and other
extended enterprise identities
• Invite and register organizations
• Delegate authority and administration
• Invite, register & credential end users via self-service
• Orchestrated application provisioning
• Attestation features
• Strong audit & reporting capabilities
Phase II: Enhanced Identity Lifecycle Management• Rich user profiles for employees of JV’s, partners, suppliers, and other
extended workforce constituents
• Role definitions and assignments (leveraging delegated model)
• Service package definitions and assignments (leveraging roles and rules)
• Request & Approval workflows
• Federated provisioning:• On first federation (SAML)
• Web services (SPML)
• Administrator managed (orchestrated, manual)
• Identity Synchronization (IDSync)
Phase III: Federated Single Sign-on• Outbound Federation: your users accessing externally hosted
applications connected to Covisint
• Inbound Federation: external users accessing your applications connected to Covisint
• Federated Sign On: User credentialed by your organization or a third party federate inbound or outbound via Covisint
• Direct Authentication: Users that are credentialed by Covisint sign in directly to Covisint, and subsequently federate to your applications or externally hosted applications connected to Covisint
Benefits Shell has seen
Benefits of Cloud Model • Lower Total Cost of Ownership• Expenses are operational - rather than capital• Time to market• Speed to value• Enhanced security posture• Focus on your core competencies• Covisint's experience = reduced project risk
Thank you.