Key Benefits
ILM 2007 FP1 is designed to simplify and automate some of the most costly aspects of Identity Lifecycle Management. ILM 2007 FP1 enables organization to:
| ? |
Synchronize Identity Information. Organizations that have many different directories and other data repositories such as a Human Resources (HR) data repository, mainframe systems, or databases, can use ILM 2007 FP1 to synchronize user accounts and attributes in all of those systems, including synchronization of passwords. Directory synchronization saves time and money that is currently spent on keeping data consistent and enforcing data ownership rules. |
| ? |
Provision and Deprovision Users. In many organizations, information about new employees is entered in a HR database first. Then, the IT department creates user accounts, mailboxes, and other identity information in different database systems. ILM 2007 FP1 automatically creates these user accounts, mailboxes, and other identity information in target systems in real-time so new employees are productive immediately, and also ensures that corporate resource access is instantly revoked for employees who leave the organization. |
| ? |
Manage Certificates and Smart Cards. ILM 2007 FP1 includes a workflow and policy based solution that enables organizations to easily manage the life cycle of digital certificates and smart cards. ILM 2007 FP1 leverages Active Directory Directory Services and Active Directory Certificate Services to provision digital certificates and smart cards, with automated workflow to manage the entire life cycle of certificate-based credentials. ILM 2007 FP1 significantly lowers the costs associated with digital certificates and smart cards by enabling organizations to more efficiently deploy, manage, and maintain a certificate-based infrastructure. It also streamlines the provisioning, configuration, and management of digital certificates and smart cards, while increasing security through strong, multifactor authentication technology. |
Key Benefits of ILM 2007 FP1
|
| Feature |
Benefit |
Synchronize Identity Information |
Organizations benefit from improved IT productivity and reduced administrative costs as identity data is kept up to date across an enterprise without manual updates. |
Provision User Accounts |
End users can be more productive by accessing needed systems faster while corporate security is improved as employees' access to systems is automatically terminated when they leave. Administrators benefit from having these processes automated which improves their own productivity and helps to lower administrative costs. |
Manage Certificates and Smart Cards |
ILM 2007 FP1 reduces the costs associated with digital certificates and smart cards by enabling organizations to more efficiently deploy, manage, and maintain a certificate-based infrastructure. IT benefits through streamlined provisioning, deprovisioning, configuration, and auditing of digital certificates and smart cards, along with increased security through the use of strong, multi-factor authentication technology. |
Connectivity Capabilities
ILM 2007 FP1 creates and distributes an integrated view of identity information from multiple data sources. Broad connectivity capabilities give you the power to connect to the plethora of disparate identity information sources in your company-all without the need to install software of any kind on the target systems.
How Identity Lifecycle Manager 2007 FP1 Works
ILM 2007 FP1 has two central components, one that includes metadirectory and user provisioning capabilities and another for certificate and smart card management.
Identity Synchronization and User Provisioning
The identity synchronization and user provisioning component of ILM 2007 FP1 manages identity information across multiple stores by aggregating this information in a central repository called the metaverse. Management agents serve as connectors that translate data from these connected stores to the metaverse. For example, the e-mail system can be linked to its HR database through the metaverse. When an employee joining the organization is added to the HR database, ILM 2007 FP1 can automatically provision that employee to the e-mail system. Each employee's attributes, from the e-mail system and the HR database, are imported into the connector space through management agents.
The e-mail system can then use individual attributes, from the employee entry that originated in the HR database, such as the employee telephone number. If an employee's telephone number changes in the HR database, the new number will automatically be propagated to the e-mail system.
Certificate and Smart Card Management
ILM 2007 FP1 also provides sophisticated credential management features to Windows Server 2003 Certificate Authorities (CA) by acting as an administrative proxy. Once installed within an organization, all digital certificate and smartcard management functions pass through ILM 2007 FP1. The certificate management solution in ILM 2007 FP1 consists of three components:
1. |
Server component: Provides a Web interface and is the focal point of administrative functions. |
2. |
Certificate Authority plug-in: Communicates with the server, controls the behavior of the CA(s), and provide rich logging and auditing in a central location. |
3. |
Client-side components:
| ? |
Smartcard Self Service Control, which provides certificate management capabilities. |
| ? |
Smartcard Personalization Control, which provides Java card management. |
| ? |
Bulk Smartcard Issuance Tool, which is an application for centralized large scale smart card deployment scenarios. |
|
|
