FirM - Federated Identity & Resource Management For Domino

Transcription

1 FirM - Federated Identity & Resource Management For Domino Q3 2005

2 Agenda Introductions What is FirM FirM Architecture Workflow Demo of FirM V2.1 User experience demonstration Administration experience demonstration Active Directory Features Implementation Options Product History and Futures Questions and Answers

3 What is FirM - Introduction A Federated Identity and Resource Management tool for Lotus Domino Federated Administration Function allows non-it users to perform complex administrative duties Drive Administration costs down to the helpdesk, or beyond into the business Release your expensive Domino Administrators to perform more skilled tasks. Automates and Manages all Identity (User) and (Resource) Group operations And therefore typical administrative actions no longer take days - they take minutes. 24x7. Optional Application Management Provides Management Information Optional Active Directory management module Workflow based two-stage authentication Audits, tracks and produces management reports on administrative activities What Kind of Application is it? Lotus Notes Based Client Experience & Lotus Domino Application Therefore easy to deploy Increases Domino Security Increases Domino Compliance Increases Environmental consistency And therefore reduces support costs

4 What is FirM - How does FirM help you? It devolves user management activity out of the IS infrastructure to the business Return on Investment Reduce Administration burden of Lotus Domino Increase environmental stability Increase service level Increase security Increased compliance through increased control and auditing All with less resource and automated 24x7 delivery.

5 What is FirM Who are we? Multi-discipline Development Team: 15 Man years experience in Automated Lotus Domino user and group management Previously developed an enterprise wide user and group management tool for IBM consulting, for an enterprise sized European Company 110,000 users 40,000 groups 600+ servers Worldwide over 100 countries UK Based, Europe-wide consulting experience Used to delivering the impossible. Mixture of skills, services and experience mean best practice. Best qualified team in the world in terms of Automated User and Group management

6 What is FirM (cont..) Flexible Client Configurable profile-based interface Runs on Domino v5, v6, v7. So you can upgrade when you choose. Requires NO system database changes. Easy to implement Rapid Development Platform independent No client overhead. Ability to interface with other Domino applications for even more automation.

7 What is FirM - FirM Architecture User experience via Notes clients. Encryption key based repositories Audit, Log, Archive repositories Easy to implement and roll out. Inbuilt two-stage workflow and authentication system Requester Authoriser Workflow Configured via Profile documents Different profile documents can have different security requirements

8 What is FirM - Competitive Differences The marketplace Rolls Royce product Our tool is aimed at Businesses, not the administration team. Its aimed at enterprise level customers Comprehensive support Flexibility and interfacability Speed of development and deployment Simple to use at all levels 24x7, clustered server support, comprehensive diagnostics, audit trail, encrypted repositories. Multiplatform server, Failover support It s a third generation tool Most existing tools are C-API based/server add-in tasks difficult to maintain and risky. It was built from the ground up to cope with enterprise level systems multi domain, multi-certifier, multilocation, cluster support, load balancing, etc.

9 What is FirM - Competitive Differences (cont..) Its our main focus. Helpsoft and GSX have a successful line of server monitoring tools. User management may not be their main focus. It will integrate with other systems MS Active Directory in v2.0 It has a user interface that does not require extensive retraining. Its easy to install! FirM. Three hours for one administrator. It does not require any system or user database design changes It is customer-extendible, using Lotusscript

10 Demo of FirM v2.0 - User Experience Demonstration Simple to use Users can only see operations you have allowed them to see Users type in minimal information Naming standards, etc, enforced Demo!

11 User Experience Demo #1 A fundamental design goal of FirM was to design: A standard notes solution Easy to use Only show what the user is allowed to use The opening screen of the FirM requester shows the status of current requests. To create a new request, click on the New Request button.

12 User Experience Demo #2 The requester is led through a Wizard-style series of simple dialog boxes. In this case, the requester is allowed to create most FirM requests. This example shows the requester creating a new Lotus Notes account one of the most difficult operations:

13 User Experience Demo #3

14 Demo of FirM v2.0 - Administration Experience Demonstration Profile Based Management solution Nested profiles aid consistency, save administration time Administrators set profiles Requesters and Authorisers use profiles Users only see transaction profiles they are allowed to use When a user only has one choice, they do not get prompted. Each Profile can dictate Static and dynamic person-document information to be added at creation time Groups that the user should be added to at creation time In addition, Transaction Profiles dictate Who can request transactions using this profile authorise transactions using this profile Which group of users this profile can operate on Who gets notified when any transaction using this profile is used.

15 Demo of FirM v2.0 - Administration Experience Demonstration (cont..) Example: User Create Profile UCR Profile Contract User depends on: Location profile: Dictates servers ID Profile: Dictates recertification period and mail file details Certifier profile. Dictates which certification hierarchy is used Company, Country and Business Group. Allows a customer to differentiate between three levels of business, and fill in standard information for each strata. When a user has a choice of more than one profile, they are prompted, using the profile names. For instance, ID profiles may be called Exec, Management, Contractor, Temp or Employee and derive different rules for ID expiry and mail file details. Demo!

16 Administration Experience #1 Another design goal of FirM is that the Administration experience should be simple and easy to use. We use FirM profiles to help define business rules. In this example, the Adminstrator is looking at all defined profiles for the user transaction: User Move Server.

17 Administration Experience #2 FirM utilises a number of scheduled agents this panel allows the Administrator to monitor and configure these.

18 Administration Experience #3 FirM has the most flexible name validation in the business. This pane shows how you can control the content of a Group Name, right down to the characters used.

19 FirM v2.0 Active Directory Capabilities User Management Create, Disable, Enable Manage user account attributes Reset password, etc. Group Management Create, Delete Manage Members Architecture LSX (LotusScript Extension) implemented as w32 DLL Approx 1,000 lines of C-API calls into LDAP/DSAPI Native win-32 code allowing rich error trapping and stability Note: Windows-32 bit architecture only Windows 2000, 2003 server. FirM Class libraries on top to provide Usual FirM Authentication, workflow methodology Richness of profile structure

20 Implementation Options Route one. Product Sale We give you a demo product You install demo and become familiar You then gain internal approval Install Product Pros/Cons Requires high level of internal resource and interaction Long time to market. Simple Route two. Audit Framework Week one. We audit your Domino security infrastructure, and identify areas where procedures/processes are weak and/or can be improved with FirM. We identify cost savings that FirM can provide. Week two. We install FirM in your environment, train all relevant staff and leave you with a working system Week four. We return to gauge feedback, confirm cost savings. Should it be a success you purchase product Week eight. We return and help you identify more cost savings. Pros/Cons Fast time to market Staged approach is attractive to management.

21 Product History and Futures V1.0 launched at Lotussphere 2002 User Management transactions including Create, Modify, Delete, Disable, Reset HTTP password, Rename, Move in Hierarchy Group Management transactions including Create. Modify details, delete, Manage Membership list System Transactions including Create new replica of database Workflow Lotusscript Object orientated API V1.1 launched in May 2003 User Management Functions: Send User ID and Password, Recertify Group Management Function: Rename group System Transactions: Create new database, change ACL, AdminP transaction Deferred Transactions Workflow v1.1 includes sub-transactions New Wizard based user interface CSV File import V1.2 In November 2003 Mail-In Database support: Create, Modify, Delete Database move (or archive ) between servers Automatic User Recertification Engine Able to add new user transactions without changing core, support nd6 and nd5 versions of transactions simultaneously Extended AdminP interface for those transactions that may need remote server action Overhauled Administration interface to allow more transactions V2.0 In 2005 Renamed from idm to FirM Active Directory support (via LDAP) Manage Users in MS AD File server domains User Create, password reset, disable Group Create, modify, manage, delete Web Transactions / Web services interface Web service Support User Password Digest support Remember. You can: Ask us to develop custom features for you independent of release cycle Develop your own custom transactions

22 Questions, Answers and Contact Details How do we take this forward? Sales questions to your FirM Reseller Technical Questions to Information at Thank you for your time and attention!