people, people, identities and credentials: how to … · • we also need help with bulk...
TRANSCRIPT
![Page 1: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/1.jpg)
PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS:
HOW TO CONNECT THE DOTS CONNECT THE DOTS
© 2019 -- ColorID, LLC 1
![Page 2: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/2.jpg)
CONNECTING THE DOTS – EARLY CARD SYSTEM
© 2019 -- ColorID, LLC 2
![Page 3: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/3.jpg)
CONNECTING THE DOTS – TODAY’S CARD SYSTEM
© 2019 -- ColorID, LLC 3
![Page 4: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/4.jpg)
WHAT WE’RE TALKING ABOUT TODAY
• We’re trying to figure out which card to go with • How do we get this mobile thing going? • Students have to wait for their cards to go live in the (fill in the blank) system • The guru who wrote our (fill in the blank) system retired • We have no good way to manage our contractors and guests • We can only use solutions that are integrated with our one card system • We can’t get the reports we need • Our data is a mess and it’s all over the place • We spend so much time doing things manually • There are so many things we need our ID system to do that it just can’t do • How did we get here?
4 © 2019 -- ColorID, LLC
![Page 5: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/5.jpg)
HOW DID WE GET HERE?
The Deferred Maintenance of Identity Management
© 2019 -- ColorID, LLC 5
![Page 6: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/6.jpg)
LOOK AT YOUR CARD
• All the technology on and in your card • Each communicates with at least one system
– Bar code – library, athletic center – Mag stripe – payments, door access, printers – Contactless smart chip – door access, payments
• Card data is identity data
6 © 2019 -- ColorID, LLC
![Page 7: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/7.jpg)
EVERYTHING ON CAMPUS
© 2019 -- ColorID, LLC 7
Library Access Control
One Card System
ID Card Issuance
Print/Copy Book Store
Dining , POS
![Page 8: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/8.jpg)
EVERYTHING ON CAMPUS
© 2019 -- ColorID, LLC 8
Library Access Control
One Card System
Residence Athletic Center
Sports Teams
ID Card Issuance
Print/Copy Book Store
Dining , POS
Vending
Laundry
Library Fees
Off-Campus
![Page 9: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/9.jpg)
EVERYTHING ON CAMPUS
© 2019 -- ColorID, LLC 9
Library Access Control
Exams
Attendance Parking
Transit One Card System
Residence Athletic Center
Sports Teams
Visitors
Contractors
ID Card Issuance
Lockers
Print/Copy
Summer Campers
Book Store
Dining , POS
Vending
Laundry
Library Fees
Off-Campus
![Page 10: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/10.jpg)
UNIVERSITY CARD DATA EXAMPLE
© 2019 -- ColorID, LLC 10
SIS Data Vault
PACS-1
Transaction System
PACS-2
ID Production Database
Card Issuance Software
Scheduled Batch Files
Scheduled Batch Files
• Often Multiple Days for Service Availability
• Manual Processes
![Page 11: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/11.jpg)
HOW DATA CHANGES AND MOVES
• Email Excel files – Department to department
• Flat file transfers – Automated
• Feeds – After data processing
• De-duplication • Number generation
• 1990s technology, but it works!
11 © 2019 -- ColorID, LLC
![Page 12: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/12.jpg)
IDENTITY MANAGEMENT
Is it a thing?
© 2019 -- ColorID, LLC 12
![Page 13: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/13.jpg)
IDENTITY IS IMPORTANT
How we manage identities and their related credentials affect how well our systems work
13 © 2019 -- ColorID, LLC
Type of identity Credential
Digital User name, password; 2FA
Financial Banking card; mobile app
Physical ID card; mobile ID
![Page 14: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/14.jpg)
FINANCIAL IDENTITY
• Your financial institution decides who you are
• They let you use their money to buy a house, car, business, toys
• Financial identity theft has been in the headlines for years – It’s even a movie! – Card issuers (banks) don’t
hold cardholders liable • But they give us expensive
EMV cards (credentials)
14 © 2019 -- ColorID, LLC
![Page 15: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/15.jpg)
PHYSICAL IDENTITY
• You take up space • You interact physically with systems
– Doors – Networks – Points of Sale – Teams and memberships – Parking and transit
• Physical persons and possessions have to be safe – No tolerance for physical “breach”
15 © 2019 -- ColorID, LLC
![Page 16: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/16.jpg)
IDENTITY AND REGULATION
• Access to digital data is governed by lots of government regulations in many markets – Health care, financial, higher education, corporations
• Physical access is not very well regulated – Home Depot example – Verizon audit
• And, as always, – Security vs. convenience
16 © 2019 -- ColorID, LLC
![Page 17: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/17.jpg)
U. S. GOVERNMENT IDENTITY MANAGEMENT
If you had all the $$ in the world… PIV card costs $150 • Background checks verify
identity • Very smart card issued • For Executive Branch only
– Federal agency employees CAC for Department of Defense
17 © 2019 -- ColorID, LLC
![Page 18: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/18.jpg)
MORE ON PIV
• Verify physical identity against PIV (card) – Biometrics and PIN – bind person to card
• Access to networks and PCs • Access to doors - physical access • Digital certificate on card
– Encrypted digital identity – Tamper proof
• Identity lifecycle concept – Certificate authority – When something changes with identity, the whole system reacts
18 © 2019 -- ColorID, LLC
![Page 19: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/19.jpg)
WHAT’S GOOD ABOUT PIV
• Tamper-proof card is bound to cardholder • Any change in cardholder status is distributed • All systems can know a person’s status at each
point of contact
19 © 2019 -- ColorID, LLC
![Page 20: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/20.jpg)
DIGITAL IDENTITY MANAGEMENT - IAM
Identity and Access Management • Usually manages credentials for IT and logical access • Microsoft product examples
– Identity Lifecycle Manager, – Forefront, MS Identity Manager
• SailPoint • Not bound to physical person
– Protect the system, not the user
20 © 2019 -- ColorID, LLC
![Page 21: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/21.jpg)
IDENTITY ON CAMPUS
How it’s done
© 2019 -- ColorID, LLC 21
![Page 22: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/22.jpg)
UNIVERSITY PHYSICAL IDENTITY MANAGEMENT – p. 1
• Establishing identity – who are you and how do we know that?
• Admissions offices have many channels for validating new students, faculty, staff – Application – self service – Mailings - address – Emails – digital identity – Financial aid - financial – Other services – 3rd party
22 © 2019 -- ColorID, LLC
![Page 23: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/23.jpg)
UNIVERSITY PHYSICAL IDENTITY MANAGEMENT – p. 2
Meanwhile over at the Card Office - • Identity data comes from student information systems to the card
database • “Gotta get a card in their hand” • Card data is pushed to various systems at issuance
– Usually just the number on the card for that system • One-card system • Access control system • Other systems – res, library, parking
• Cards stay issued – Students, faculty members, staff could be in systems forever – Changes handled manually by Card Office
23 © 2019 -- ColorID, LLC
![Page 24: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/24.jpg)
CREATING A VARIETY OF CREDENTIALS
• How will each system know you are who you say you are? • Issuing and managing multiple credential types
– Card/cards • Multiple credentials on each
– Mobile credentials – doors, POS • See my presentation on mobile on Wednesday at 1:30
– Biometrics – really physical access!
24 © 2019 -- ColorID, LLC
![Page 25: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/25.jpg)
IDENTITY MANAGEMENT CHALLENGES
• What if someone loses their card or key or credential, or they leave the school? – “We have thousands of expired users in our databases”
• Manual processes – Removing privileges once student or staff leave campus – Updating permissions, re-issuing cards, managing dataflow
• Identity data silos obstruct a consolidated view of identities and access rights
25 © 2019 -- ColorID, LLC
![Page 26: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/26.jpg)
THERE IS THIS PRODUCT…
PIAM = Physical Access and Identity Management
© 2019 -- ColorID, LLC 26
![Page 27: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/27.jpg)
PIAM MOVES CREDENTIAL DATA
© 2019 -- ColorID, LLC 27
Access Control
Systems
One-Card System
Library/Print-Copy Parking Mobile ID
SIS or IAM
PIAM Includes card production, photo upload, self
service
![Page 28: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/28.jpg)
EVERYTHING ON CAMPUS
© 2019 -- ColorID, LLC 28
Library Access Control
Exams
Attendance Parking
Transit One Card System
Residence Athletic Center
Sports Teams
Visitors
Contractors
ID Card Issuance
Lockers
Print/Copy
Summer Campers
Book Store
Dining , POS
Vending
Laundry
Library Fees
Off-Campus
![Page 29: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/29.jpg)
PIAM MOVES CREDENTIAL DATA
© 2019 -- ColorID, LLC 29
Access Control
Systems
One-Card System
Library/Print-Copy Parking Mobile ID
SIS or IAM
PIAM Includes card production, photo upload, self
service
![Page 30: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/30.jpg)
DATA CONNECTIONS • It’s the 21st century!
– No patience for laggy data • RESTful APIs • Native DB connections • ODBC • Flat file transfers still have a place • 24-72 hour feeds are no longer acceptable
© 2019 -- ColorID, LLC 30
![Page 31: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/31.jpg)
HID SAFE SELF-SERVICE BADGING PROCESS
Student requests new ID card Approver
Approver notified
Student notified card is printed
Downstream systems , PACS, Library, Parking auto-updated with new badge
numbers
Approves request Self-Service
Portal
Card Office
Existing Card is updated or Security prints.
Workflow is documented for Audit
and Compliance
Prints the ID card
© 2019 -- ColorID, LLC 31
![Page 32: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/32.jpg)
SAFE HAS SOME INTELLIGENCE
• Physical access control example:
• HID SAFE has intelligence built in – Policy – Integration
• Ensure each identity has the right access, to the right areas, for the right length of time
© 2019 -- ColorID, LLC 32
![Page 33: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/33.jpg)
SOLUTION ARCHITECTURE
© 2019 -- ColorID, LLC 33
IT/HR Infrastructure
Physical Security Infrastructure
IT/AD
HR Database
Other Third Party Systems
Access Control (PACS)
Biometrics
Application Server
Database
Web Server
![Page 34: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/34.jpg)
PIAM MANAGES FULL IDENTITY LIFECYCLE
Disenroll/Terminate/Check-out
Enroll/Hire/Pre-register/Contract
Reports Operational/Predictive
Access Audit and Compliance
Authorize/Vetting
Issuance of Campus ID Cards or Mobile Tokens
Provision
Check-In Kiosks • can include issuance of temp badge
Contractors
Students Staff
Visitors Vendors
© 2019 -- ColorID, LLC 34
![Page 35: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/35.jpg)
COME TOGETHER
PIAM is a group effort
© 2019 -- ColorID, LLC 35
![Page 36: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/36.jpg)
SHARING IDENTITIES AND RELATED CREDENTIALS
How are the credentials and the permissions that go with them shared with campus systems? • Across distributed
campuses • Across multiple systems • Do you have silos?
36 © 2019 -- ColorID, LLC
![Page 37: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/37.jpg)
SAFE IDENTITY MANAGEMENT – LIKE GOOGLE DOCS
On-boarding & Badging
Visitor Management
Access Management
Privacy & Compliance Analytics
![Page 38: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/38.jpg)
Needs to know when identities are on-boarded
Needs to restock badges
On-boarding & Badging
Visitor Management
Access Management
Privacy & Compliance Analytics
SAFE IDENTITY MANAGEMENT – LIKE GOOGLE DOCS
![Page 39: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/39.jpg)
Responsible for visitor & event management campus
wide
On-boarding & Badging
Visitor Management
Access Management
Privacy & Compliance Analytics
SAFE IDENTITY MANAGEMENT – LIKE GOOGLE DOCS
![Page 40: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/40.jpg)
Changed their major a month
ago
They report to her
On-boarding & Badging
Visitor Management
Access Management
Privacy & Compliance Analytics
Needs to audit access for off site Hospital Research
They now reside on campus
Research Staff who work in a Govt
high security area
SAFE IDENTITY MANAGEMENT – LIKE GOOGLE DOCS
![Page 41: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/41.jpg)
Needs to compile compliance report for all sites
On-boarding & Badging
Visitor Management
Access Management
Privacy & Compliance Analytics
SAFE IDENTITY MANAGEMENT – LIKE GOOGLE DOCS
![Page 42: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/42.jpg)
On-boarding & Badging
Visitor Management
Access Management
Privacy & Compliance Analytics
Needs to understand which sites are violating tailgating policies
SAFE IDENTITY MANAGEMENT – LIKE GOOGLE DOCS
![Page 43: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/43.jpg)
IDENTITY MANAGEMENT FOR THE ENTERPRISE On-boarding &
Badging Visitor
Management Access
Management Privacy &
Compliance Analytics
Managing identities at the enterprise level solves problems and provides opportunities
![Page 44: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/44.jpg)
TEMPORARY IDENTITIES
Just stopping by
© 2019 -- ColorID, LLC 44
![Page 45: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/45.jpg)
TEMPORARY IDENTITIES
• How do we create and manage identities for visitors, conferences and events?
• Timed events – Visitors to residence halls – Any other visitors
45 © 2019 -- ColorID, LLC
![Page 46: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/46.jpg)
TEMPORARY ID CARDS – USE CASE
• Question for you. We are looking at Visitor Management for some of the loaner cards we print for guests and contractors. These cards do not currently fit into our badging process as cleanly as we want so ideally looking for a solution that would allow sponsors to pre-enroll guests and then print badges as needed.
• We also need help with bulk enrollment processes. For instance
Housekeeping is contracted out and they request 50 cards at a time. I want a way to set them up for bulk printing.
• I would really love a way for the system to help automate audits of these guest/contractors cards as well. Also a way for these sponsors to re-certify that the cards are still in use/possession.
46 © 2019 -- ColorID, LLC
![Page 47: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/47.jpg)
REPORTING AND COMPLIANCE
What just happened?
© 2019 -- ColorID, LLC 47
![Page 48: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/48.jpg)
REPORTING AND COMPLIANCE
• We need to know who, what, when, where, and maybe why, identities and credentials were: – Created – Used – Revoked
• ID systems may store some of this data – How to pull it together?
48 © 2019 -- ColorID, LLC
![Page 49: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/49.jpg)
EU GDPR – GENERAL DATA PROTECTION REGULATION
• May, 2018 • Covers any data stored
for EU persons • Requires personal
consent to use data • Requires data removal
after use • Fines for non-compliance
– Maximum of 4% of global annual turnover or €20 million
49 © 2019 -- ColorID, LLC
![Page 50: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/50.jpg)
IDENTITY ANALYTICS
• Manage risk profiles per person – These can change after enrollment – Observed behavior on campus
• Files accessed • Doors accessed
– Behavior off campus • External databases log this
– Manage threats • Insider cyber attacks • Physical attacks
50 © 2019 -- ColorID, LLC
![Page 51: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/51.jpg)
DIFFERENT APPROACHES
Is there another way?
© 2019 -- ColorID, LLC 51
![Page 52: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/52.jpg)
OTHER APPROACHES TO “PIAM” • Take a “best of breed” approach • Many new solutions for identity management
– New, robust ID issuance software products • Powerful data handling capabilities
– Move and manipulate data across many systems • Swiftdata
– Photo upload products • CloudCard, MyPhoto
– Real time reporting • Tableau, Qlik, Domo, Splunk
© 2019 -- ColorID, LLC 52
![Page 53: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/53.jpg)
WHAT TO DO? • What gaps do we have, both in security and in
convenience? – Identity management directly impacts the “user
experience” – Deferred maintenance of identity management?
• Can departments pull together around Physical Identity and Access Management?
• Are our current systems locking us into a future of limited options regarding identity and credentials?
© 2019 -- ColorID, LLC 53
![Page 54: PEOPLE, PEOPLE, IDENTITIES AND CREDENTIALS: HOW TO … · • We also need help with bulk enrollment processes. For instance Housekeeping is contracted out and they request 50 cards](https://reader034.vdocuments.mx/reader034/viewer/2022042303/5ecde08c5140d13f9829b128/html5/thumbnails/54.jpg)
THANK YOU
© 2019 -- ColorID, LLC 54