19
H O W T O A U T O M A T E U S E R P R O V I S I O N I N G Tyler Shields Senior Analyst, Mobile & Application Security David Meyer Vice President, Product Management Alleviate the Headaches of Cloud App Provisioning Chip Epps Director, Product Marketing Rob Capozzi Sales Engineering

How to Automate User Provisioning

Embed Size (px)

Citation preview

Page 1: How to Automate User Provisioning

H O W T O A U T O M A T E

U S E R P R O V I S I O N I N G

Tyler ShieldsSenior Analyst, Mobile & Application Security

David MeyerVice President, Product Management

Alleviate the Headaches of Cloud App Provisioning

Chip EppsDirector, Product Marketing

Rob CapozziSales Engineering

Page 2: How to Automate User Provisioning

/ / / Introduction

/ / / Overview of User Account Provisioning

/ / / LIVE Demo

/ / / Questions & Answers

A G E N D A

Page 3: How to Automate User Provisioning

T R E N D S

Cloud Applications VS On-Premises Applications

Federated Access VS Single Domain

Open Standards VS Proprietary APIs

Automatic - JIT VS Manual

Real-Time Synch VS Batch Updates

IDaaS VS IAM

Page 4: How to Automate User Provisioning

T R E N D S

Cloud Applications VS On-Premises Applications

Federated Access VS Single Domain

Open Standards VS Proprietary APIs

Automatic - JIT VS Manual

Real-Time Synch VS Batch Updates

IDaaS VS IAM

Page 5: How to Automate User Provisioning

T R E N D S

Cloud Applications VS On-Premises Applications

Federated Access VS Single Domain

Open Standards VS Proprietary APIs

Automatic - JIT VS Manual

Real-Time Synch VS Batch Updates

IDaaS VS IAM

Page 6: How to Automate User Provisioning

T R E N D S

Cloud Applications VS On-Premises Applications

Federated Access VS Single Domain

Open Standards VS Proprietary APIs

Automatic - JIT VS Manual

Real-Time Synch VS Batch Updates

IDaaS VS IAM

Page 7: How to Automate User Provisioning

T R E N D S

Cloud Applications VS On-Premises Applications

Federated Access VS Single Domain

Open Standards VS Proprietary APIs

Automatic - JIT VS Manual

Real-Time Synch VS Batch Updates

IDaaS VS IAM

Page 8: How to Automate User Provisioning

T R E N D S

Cloud Applications VS On-Premises Applications

Federated Access VS Single Domain

Open Standards VS Proprietary APIs

Automatic - JIT VS Manual

Real-Time Synch VS Batch Updates

IDaaS VS IAM

Page 9: How to Automate User Provisioning

I D E N T I T Y F O C U S

strong adoption

current wave

nextwave

mobile identity web SSO

U S E R P R O V I S I O N I N G

policy management

cloud directory

app visibility

OneLogin Survey – Sep, 2014

Page 10: How to Automate User Provisioning

W H Y A U T O M A T E?

10

S E C U R I T Y

● 47% experienced data breaches caused by internal incidents

● Avg cost of data breach increased 15% YoY

P R O D U C T I V I T Y

● $10 per Help Desk call to address access issues

● COTS provides 40% savings over BYO● 90% reduction in Audit headcount

Page 11: How to Automate User Provisioning

CLOUDAPPS

P R O V I S I O N I N G & U S E R A C C O U N T M G M T

11

OFFBOARDONBOARDService Request

Page 12: How to Automate User Provisioning

P R O V I S I O N I N G & U S E R A C C O U N T M G M T

ONBOARDService Request

12

OFFBOARD

GroupsRolesEntitlements

FederationSSOMFA

GRANTLicensingAttributes

CLOUDAPPS

Page 13: How to Automate User Provisioning

P R O V I S I O N I N G & U S E R A C C O U N T M G M T

13

ComplianceGovernanceAnalyticsReporting

OFFBOARDONBOARDService Request

AUTHENTICATION

AUTHORIZATION

ACCESS

IDENTITY

CLOUDAPPS

Page 14: How to Automate User Provisioning

P R O V I S I O N I N G & U S E R A C C O U N T M G M T

14

IDENTITY

AUTHENTICATION

AUTHORIZATION

ACCESS

REVOKE RetainSuspendDelete

OFFBOARDONBOARDService Request

CLOUDAPPS

Page 15: How to Automate User Provisioning

Firewall

SCIM Agent

S C I M I N T E G R A T I O N S

SCIM

CustomSCIM

SCIM

Custom

● SCIM Agent behind firewall

● SCIM endpoints you manage

● Endpoints in any language

Page 16: How to Automate User Provisioning

PROVISIONINGDEMO

Page 17: How to Automate User Provisioning

Add User to Active Directory

Automatically Provision Users to

○ Office 365 [SCIM]○ Dropbox○ Syncplicity

S E T T I N G T H E S T A G E

AD CONNECTOR

Dropbox

CLOUDAPPS

Page 18: How to Automate User Provisioning

Q & A

Page 19: How to Automate User Provisioning

THANK YOUDavid MeyerVice President, Product Management

[email protected]

@meyerwork

Tyler ShieldsSenior Analyst, Mobile & Application Security

[email protected]

@txs

Rob CapozziSales Engineering

[email protected]

Chip EppsDirector, Product Marketing

[email protected]

@chipepps