Identity Management a

JourneyJody Harrison

Dell One Identity Management

• Password Manager

• Identity Manager

• Feeds AD; does not replace.

• Attestation

• Workflows

• Web portal

• Data Governance

Password Manager

360 View

AD and Workflow

The beginnings…

• First conversations

• 2013

• What do we do with affiliate accounts and visiting scholar accounts?

• How are they represented in the TAMHSC framework? How can we control better?

• Discovery

• Dell World 2014

Bringing it home

• Demos

• OIT Senior Staff

• HR, Facilities, etc.

• Getting buy-in

• Very important

• OIT, HR and more

Discovery

• Conversations about the project

Statement of Work

• Cost associated with project and what's covered

The Requirements

• A list of objectives for a successful project

REQ-AD-1 Active Directory Account Creation rulesWhen a new Active Directory account is created it must be set with the following parameters:•"User must change password at next logon" CHECKED•"Created an Exchange Mailbox" UNCHECKED•The EMPLID attribute will be populated with the UIN number and for Contractors that don't have a UIN the D1IM generated unique number will be used.

OIT Requirements

• Dev environment

• Similar systems, will need representation

• Preproduction

• Copy of production

• Production

The Project

• Lots of interviews• HR, Helpdesk, more OIT…

• The easy win, Password Manager

• Use Cases, similar to requirements

• Separating DL and Security Groups

• Next Steps• Verification of processes

• Estimated Go Live – March 2016

Issues

• Training – choosing the correct time

• Statement of Work – check the details!

• Not a replacement for AD tools

• Plan is to replace Active Roles

• HR feed

• Process has taken much longer than originally thought to work through the format of the data.