The Return on Investment (ROI) for Forefront Identity Manager

Transcription

1 The Return on Investment (ROI) for Forefront Identity Manager July Edgile, Inc All Rights Reserved

2 INTRODUCTION Managing identities within organizations and ensuring appropriate access to information has become a costly and time-consuming activity. The costs and challenges grow exponentially as the: Number and types of users increase Number of services and systems grow Complexity of systems and applications increase Regulatory demands increase The IdM value proposition is quite clear: streamlined business processes, increased security, business continuity, Cost savings, and so forth. However, external forces such as compliance and privacy regulations (e.g., breach disclosures laws, Health Insurance Portability and Accountability Act [HIPAA], and Gramm-Leach-Bliley Act [GLBA]) are forcing businesses to focus on the value proposition not only for the business but also for individuals. 1 In the past five years, a large number of organizations have invested in multi-year, multi-million dollar projects to address the growing cost and complexity of managing access and identities. Despite broader recognition of the need for securing access to applications and other IT resources, enterprises are still struggling to come to terms with the issues involved with identity and access management (IAM), Gartner has warned 2. Microsoft s expansion in the market with Microsoft Forefront Identity Manager 2010 has the potential to significantly reduce the cost and effort required to address this issue. Forefront Identity Manager can be deployed in a more cost effective manner compared with identity and access management (IAM) solutions offered by industry competitors, due to its tight integration with key infrastructure systems such as Microsoft Active Directory and Microsoft Exchange. Owing to this cost-effective approach, Microsoft enables organizations implement at a lower cost. Large organizations have been able to identify significant savings associated with the implementation of Forefront Identity Manager. Examples of these savings include; Over $100,000 in annual savings for a financial firm implementing self-service password reset Approximately $300,000 in savings for automating user account provisioning for a large retailer. A reduction of more than $300,000 annually in external audit fees for a manufacturing company. $565,000 in identified savings through the use of lower-cost tokens and consolidated provisioning processes for a company with 4,500 tokens. Microsoft plays a unique and significant role in many IT organizations. Active Directory is used as a major identity store in most organizations with a number of applications tied into the Windows authentication mechanisms and linked to this directory service. Additionally, a majority of client machines run a Microsoft operating system and Microsoft has a wide range of major applications such as Office and SharePoint that play prominent roles in most organizations. The unique position 1 Identity Management Market 2008: Busting at the seams, Burton Group, July 23, 2008, Lori Rowland 2 Enterprises still grappling with access management: Gartner, Angus Kidman, July 11, May Edgile, Inc All Rights Reserved

3 Microsoft technology plays provides a number of advantages for using a Microsoft-centric solution to address IAM challenges. This white paper analyzes Microsoft s ability to drive significant value within organizations by addressing the key challenges associated with IAM. The goal of the white paper is to: Identify and explain the value opportunities for improved IAM capabilities Provide key indicators to identify potentially deficient IAM processes Analyze how Microsoft technologies including Forefront Identity Manager enable the achievement of the key value opportunities Present potential savings that can be achieved based on real-world scenarios Readers should use the information presented in this white paper to determine the potential savings and benefits associated with using Microsoft technologies to address their IAM challenges. Readers will also find that Microsoft s current footprint in their organizations and Microsoft s aggressive pricing model may offer the opportunity to achieve these benefits in a significantly shorter timeframe and at a lower cost than alternative solutions. CHALLENGES Managing user identities and corresponding access rights has created a number of challenges for organizations. These challenges include elevated cost structures, security and usability issues, process inefficiencies and compliance issues. The challenges are growing as companies extend their enterprises by leveraging software as a service, electronically supporting partnerships and third-party workforces. The focus of this analysis includes the major IAM related challenges within the enterprise including: User Productivity: Users are adversely affected by weak IAM capabilities which negatively impact productivity. Associated issues include: Large numbers of IDs and passwords. Our studies show the average user has to remember five different IDs and passwords Inconsistent methods for acquiring access to systems and information Long delays experienced for access to be granted and passwords to be reset Manual Provisioning Processes: Account provisioning is achieved with expensive, inefficient, and manual processes. Associated issues include: Significant amount of IT resources are spent activating and deactivating accounts High numbers of help desk calls are required to resolve account access issues Users retaining access to systems after access is no longer required Errors prevalent with manual processes Difficulty in auditing provisioning status Redundant and Disintegrated Provisioning Activities: Duplicative processes for managing physical and logical access. Associated issues include: Increased complexity and costs due to separate badge/token processes Requirement for users to maintain multiple badges or tokens Complexity of certificate management processes May Edgile, Inc All Rights Reserved

4 Compliance and Security Issues: Increased complexity and cost of maintaining adequate controls to meet requirements. Associated issues include: Manual validation of SOX significant controls Significant amount of time required by external audit to validate controls Time consuming process of account revalidation Ineffective or untimely deactivation of accounts for terminated or departing employees The following diagram illustrates the challenges discussed above: The IAM challenges facing organizations today are vast and complicated. Organizations that don t address these challenges face permanently elevated IT costs, increased risks and lower employee productivity. The following sections describe an approach to analyzing the value that can be realized by implementing Forefront Identity Manager at your organization. VALUE ANALYSIS Forefront Identity Manager offers value to an organization in a number of ways. Improved and automated provisioning processes can provide both non-monetary benefits in the form of improved accuracy of information for compliance purposes and monetary benefits in the form of reduced effort required to support provisioning. The reduction in effort could have direct monetary benefits in the form of a direct reduction in staff and dedicated resources. Additionally, an indirect monetary benefit could result by freeing up resources that can then be leveraged for other needs across the organization. May Edgile, Inc All Rights Reserved

5 EXAMPLE VALUE DATA To support the development of this white paper, we have used information from actual IAM value analyses that we have performed for major organizations. We have selected three representative value analyses spanning three industries (retail, financial and manufacturing) and represent a consistent set of IAM issues that confront most organizations. The value analyses consisted of five to eight week efforts that included interviews, data collection including financial and logistical information, technology and financial analysis. A consistent methodology was leveraged on each effort. Direct Monetary Benefits: An example would be a direct staff reduction or the ability to forgo a required staff addition. Indirect Monetary Benefits: Soft dollar savings that cannot be eliminated from the company s budget, but represent productivity savings such as reducing the amount of user time required to reset a password. Non-Monetary Benefits: Benefits that cannot be quantified but provide clear benefits to the companies such as improved security. Please note: The value analyses presented in this white paper are examples presented to illustrate the potential benefits of implementing IAM solutions. An organization would need to apply the principles discussed in the following sections against the characteristics of their own organization to define the actual potential value. KEY VALUE DRIVERS Value Drivers are specific IAM processes, functionality or characteristics, that can be clearly defined and provide a significant challenge and potential cost savings opportunity for organizations. The specific Value Drivers shown below represent clear opportunities to drive significant cost savings and process improvements. Time to Value Enhanced User Experience Includes self-service password reset Account Provisioning and Access Request Audit and Compliance Certificate and Smart Card Management VALUE DRIVER #1 (TIME TO VALUE) IAM efforts have become notorious for multi-year time horizons with value only being achieved towards the end of the effort. The time it takes for an IAM solution to start bringing value to an organization is a major consideration as you begin to define the return on investment (ROI) of the effort. The term Time to Value will be used to describe this Value Driver. Time to Value has been high for projects for a number of reasons including: Internal learning curve of new technologies Implementation of new complex infrastructure components Integration of diverse technologies May Edgile, Inc All Rights Reserved

6 Organizational changes required Complexity of the IAM problem Technology-focused projects as opposed to business-focused projects Time to Value has been one of the major reasons that IAM projects fail. As projects exceed their projected time and cost estimates without bringing definable value to the organization, the support for the efforts decrease and continued funding is jeopardized. The ability of an IAM solution to drive value quickly to the organization both enhances the ROI of the effort, as well as lowers the risks associated with the overall effort. Problem Indicators Business requirements and business Value Drivers are not documented or clearly defined Project plan extends out over 12 months before driving significant value to the enterprise Project requires deployment of infrastructures components that already exist within the enterprise (i.e. Directory) Heavy reliance on expensive specialized HOW FOREFRONT IDENTITY MANAGER ADDRESSES THE PROBLEM Forefront Identity Manager provides a number of advantages over competing products in the area of Time to Value. It is built on technologies most organizations are familiar with, is less complex and leverages Microsoft technologies that many organizations already have in place. Internal Learning Curve of New Technologies: Most organizations have a significant investment in the skills necessary to implement and maintain Microsoft technologies. This investment is in understanding the operating system and server components, directory systems, the development languages and tools, and supporting technology such as messaging. The need to learn new technologies can significantly increase the time it takes to deploy the solution as well as the need to rely on expensive consultants. New Complex Infrastructure Components: Most IAM products in the marketplace first require you to implement a directory as well as other application components. The criticality of these major components, their integration with and population from existing identity stores, and ensuring the reliability and resilience of the solutions require significant time. Forefront Identity Manager allows enterprises to leverage their existing Active Directory infrastructure to save a significant amount of time in the deployment process compared to other competitive solutions. Technology-Focused Projects as Opposed to Business-Focused Projects: IAM is a business problem that offers significant value to organizations once solved. Organizations that start with a technology solution without a clear understanding of the business problem usually end up redirecting efforts causing significant delays. A clear understanding of the business problem, with measurable value, should be the focus of the effort. Forefront Identity Manager allows enterprises to focus their implementation on business goals through the use of policy rules. Organizational Change: The last area is the amount of organizational change and alignment required to successfully deploy IAM solutions. A large number of companies attempted to adopt Role Management solutions when roles have not been formally used or defined. The realization that these solutions require organizations to change creates significant delays in the ability to drive value quickly. May Edgile, Inc All Rights Reserved

7 Overall, IAM efforts have a number of challenges. By focusing on Time to Value, IAM efforts move from investment activities to value activities. Microsoft allows companies to get to that point more quickly and decreases the complexity of the effort. VALUE DRIVER #2 (ENHANCED USER EXPERIENCE) High levels of user frustration due to multiple log-in and passwords, manual access request processes and delays in granting access along with bloated cost structures associated with slow, manual IAM processes are a common thread in a significant number of large organizations. These frustrations are driven by long help desk hold times, confusing access request processes and excessive delays to get access. The impact on user productivity and opportunity for cost reductions represents a major opportunity for IAM projects. The term Enhanced User Experience will be used to describe this Value Driver. Problem Indicators The average user has to remember more than 5 log-in IDs and passwords Helpdesk calls for Identity management issues (password reset, access issues, etc) take up over 20% of helpdesk time In many organizations, user experience is a major driver for IAM. The major issues or pain points include: Multiple log-ins and passwords Non-standard access request processes Time consuming help desk calls No single place (web location, contact) to make an access request and/or check the status of an access request Services levels for processing of on-boarding and/or access requests are not defined and/or HOW FOREFRONT IDENTITY MANAGER ADDRESSES THE PROBLEM Forefront Identity Manager provides a number of different capabilities that directly address the Enhanced User Experience. Capabilities, such as self-service functionality, centralized access request portal and single sign-on are key drivers to helping organizations drive business value quickly and cost effectively. Multiple Log-ins and Passwords per User: Forefront Identity Manager provides organizations the mechanism to allow organizations to synchronize logons and passwords to reduce the number of login and password that users must remember.. By leveraging the existing Microsoft infrastructure, Forefront Identity Manager is able to provide an improved user experience. Non-standard Access Request Processes: Productivity loss can be caused by difficulty in finding the right process or person to request access to a specific system. In most organizations there are different methods to request access depending on the system. Forefront Identity Manager provides a central, web-based portal where users can request access for all enterprise applications. Forefront Identity Manager s native integration with Active Directory and other Microsoft-based core infrastructure provides a lower-cost solution for most organizations. Time-consuming Help Desk Calls: A key component in driving business value quickly is integrated, out-of-the-box, self-service functionality to support password reset, distribution lists, user profiles and group management. This allows users to manage their own user experience while enabling May Edgile, Inc All Rights Reserved

8 IT to increase productivity and reduce help desk expenses. It also keeps highly compensated system and administrators focused on higher-value tasks rather than resetting passwords and administering e- mail distribution lists. Forefront Identity Manager has the unique advantage of integrating self-service functionality directly into Microsoft Office and the Windows client login experience rather than forcing users to learn new functionality or attempt to navigate to a web page to access the functionality. There are significant opportunities to drive business value via the Enhanced User Experience. Consolidating access request processes, implementing self-service functionality and leveraging sign-on capabilities results in direct and indirect monetary benefits. The benefits include a lower number of help desk calls, shorter hold times and less direct IT involvement supporting users. Forefront Identity Manager is best positioned to quickly and cost effectively provides these benefits. EXAMPLES OF BENEFITS FROM VALUE ANALYSIS A 10,000 person financial firm had ~3000 password reset helpdesk calls per month lasting ~10 minutes each. The average user had different log-in/password combinations and logs on to six to eight different systems a day. A Microsoft centric password reset function solution reduced these calls by 60% saving ~$100,000 in direct monetary benefit and ~$150,000 in indirect monetary benefits. A cumbersome and largely manual access request process forced users to submit separate requests for each system. Ineffective processes and significant delays in gaining access resulted in user frustration and wasted time. A centralized access request portal that simplified and streamlined the access request process increased user satisfaction and was projected to realize over $1.4 million in improved user productivity. VALUE DRIVER #3 (ACCOUNT PROVISIONING AND ACCESS REQUEST) This issue is highlighted by highly compensated IT professionals performing simplistic, routine provisioning tasks; business executives wasting time requesting user access; and significant delays granting the necessary access for employees and contractors to perform their jobs. These inefficiencies also create the risk that unauthorized users will gain or maintain access to critical business systems. The terms Account Provisioning and Access Request will be used to describe this Value Driver. The primary drivers for inefficient provisioning and request processes include: Manual and distributed account provisioning activities Manual and inconsistent Access Request and approvals processes Non-existent process to manage access changes due to user role changes Non-standardized account de-provisioning process No central record for user access privileges leading to inconsistent de-provisioning activities May Edgile, Inc All Rights Reserved

9 HOW FOREFRONT IDENTITY MANAGER ADDRESSES THE PROBLEM Forefront Identity Manager delivers the functionality that helps organizations resolve long-standing account provisioning and access request issues. Manual and Distributed Account Provisioning Processes: Forefront Identity Manager enables organizations to quickly provision accounts, mail boxes and group memberships that allows users to become productive much faster. It provides this capability for heterogeneous as well as Microsoft specific environments. Manual and Inconsistent Access Request and Approvals Processes: A centralized access request and approval portal integrated with Microsoft Office provides users and managers a single place to request and approve access. Automated workflow streamlines approvals thereby savings manager s time and shortening the approval process. Non-existent Process to Manage Access Changes Due to User Role Changes: Automated user access changes, based on a database of record such as an on-boarding application, or a Human Resources system like SAP, ensures that users have access rights appropriate for their role. Problem Indicators No single place (web location, contact) to make an access request and/or check the status of an access request Access approvals are manual either through an or phone conversation Approvals are not stored in an easily searchable or accessible form such as in a database Systems routinely have users defined in the system that should no longer have access Researching and responding to audit Non-standardized Account De-provisioning Process: Automated user access de-provisioning, based on terminations in a similar source of record, provides the capability to remove user access privileges throughout the organization. Forefront Identity Manager provides this capability for Microsoft as well as non-microsoft applications. No Central Record for User Access Privileges Leading to Inconsistent De-provisioning Activities: Forefront Identity Manager provides a centralized view of existing user access privileges as well as a record of all changes in privileges. This record provides reporting capabilities for all applications provisioned by Forefront Identity Manager. Organizations can leverage this record for operational, compliance and audit purposes. May Edgile, Inc All Rights Reserved

10 VALUE EXAMPLES A retail company devotes ~38 full-time equivalent employees to support user account provisioning to approximately 200 different systems. Implementing Forefront Identity Manager to automate the access request and provisioning process is projected to save ~$300,000 annually in direct monetary benefits (headcount reduction) and ~1,000,000 in indirect monetary benefits (efficiency gains). A manufacturing company with ~12,000 users currently spends ~$1,100,000 annually to support their manual account provisioning, de-provisioning and access change management processes. Forefront Identity Manager is expected to allow them to reduce those costs to about $650,000 through a reduction in the number of resources required to support these manual processes. This is a direct Monetary Benefit of approximately $450,000 annually. VALUE DRIVER #4 (AUDIT AND COMPLIANCE) Regulatory compliance requirements, such as HIPPA 3, SOX 4 and GBL 5, are driving organizations to strengthen internal controls over: access requests and supporting approvals, access revalidation activities, and Problem Indicators account de-provisioning efforts. As a result, organizations are performing significant audit and compliance activities Access approvals are handled through s in highly manual fashions that are inefficient and in many or telephone calls cases ineffective The growing compliance demand on organizations is causing a number of issues for organizations. These issues include: Lack of evidence Higher audit exceptions Time consuming user access revalidation processes. The logging of access approvals is not reliable or easily searchable The access request and provisioning process is not viewed as reliable for audit purposes Excessive hours spent responding to audit HOW FOREFRONT IDENTITY MANAGER ADDRESSES THE PROBLEM According to the Burton Group The expanding identity universe is being driven by compliance as organizations are required to implement stricter access controls. 6 The importance of compliance for IAM deployments is due to growing nature of the problem and the significant efficiencies that can be gained though a well thought out IAM solution. 3 HIPAA is an acronym for the Health Insurance Portability and Accountability Act 4 SOX is an acronym for the Sarbanes-Oxley Act 5 GLB is an acronym for the Gramm-Leach-Bliley Act 6 Identity Management Market 2008: Busting at the Seams; Burton Group; Lori Rowland; Jul 23, 2008 May Edgile, Inc All Rights Reserved

11 Forefront Identity Manager can help organizations address audit and compliance requirements by automating access provisioning processes, providing better information and evidence, and automating revalidation processes. Forefront Identity Manager provides core capabilities that enable organizations to: Increase productivity Improve control effectiveness Decrease audit costs Reduce risks To address the specific problems related to audit and compliance issues, Forefront Identity Manager offers a number of capabilities that can drive significant value for the organization. Lack of Evidence: A centralized record of existing user privileges and an auditable record of all adds, changes and deletes eliminate the need for manual evidence collection and analysis. Auditors have the ability to access information on user access privileges, approval history and historical changes in privileges through SQL Reporting Services or 3 rd party providers. Higher Audit Exceptions: Automated provisioning, user access changes and approval process significantly reduce the number of audit exceptions. The availability of information regarding the access levels for specific users and systems allows auditors to quickly determine whether the appropriate segregation of duties is maintained and whether or not the appropriate controls are inplace to ensure proper user access and overall system access. Time-consuming User Account Revalidation: Forefront Identity Manager enables a web-based portal leveraging the centralized record of existing user privileges which provides key business and systems owners with the means to quickly determine whether users have the proper access levels. Business owners use the portal to determine appropriate access levels and direct changes as necessary. Direct cost savings through reduced external auditor fees represents a significant opportunity for organizations. The opportunities vary widely across different types of organizations, but many organizations project that they can save over $100,000 annually in external audit cost reduction. VALUE EXAMPLES A manufacturing company with approximately 18,000 employees projected that they would save over $300,000 annually in external audit fees alone by implementing Forefront Identity Manager. The savings are based on the reduced number of hours their external auditor spent manually documenting the proper controls for account provisioning, revalidation and segregation of duties. Automating user access approval and revalidation provides significant benefits. The indirect monetary benefit for the Internal Audit team at a retail client is expected to exceed $2,000,000 annually by reducing the effort managing audit exceptions and audit preparation. Another manufacturing client estimated that similar savings are approximately $1,000,000 annually through a similar effort to automate access approval and revalidation. May Edgile, Inc All Rights Reserved

12 VALUE DRIVER #5 (CERTIFICATE AND SMART CARD MANAGEMENT) Tokens (any physical device used for logical authentication) and Certificates used for authentication are key components of IAM. In most organizations, logical security (authentication to networks and systems) is usually segmented from physical access (access to building and locations). Public Key Certificates are also becoming more common in organizations. The convergence of these systems as noted by the Burton Group has several benefits including stronger authentication and better lifecycle management. 7 Similar to multiple ID s and passwords, users can also have multiple Tokens. Most users have a physical ID, usually in the form of a contactless card, that is provisioned by the physical security group and a Token for logical access, that is usually provisioned by the Information Security group. Redundent provisioning processes and multiple Tokens create unnecessary costs and negatively affect the user experience. At the same time, some organizations have started to leverage Certificates for user authentication, encryption, and to a lesser degree, digital signatures. Private keys and Public Key Certificates are not Tokens, but data that must be available to the user to access the capability. Some organizations have used Smartcards for the storage of these certificates and card management systems to manage the cards and Certificates. The growth in the use of certificates, smartcards, and logical tokens is being driven by the growth of virtural workforces, new technology models like Cloud Computing and growing digital intergration with partners. The physical token is becoming one of a nubmer of strong identity technologies that is causing organizations a nubmer of challenges.these include: Multiple Tokens with duplicate provisioning processes Provisioning of physical Tokens is difficult and distributed Certificates are difficult to manage for both IT and the user Problem Indicators Users have two or more tokens used for authentication and multiple processes exist to provision tokens Users have public key certificates that are used for authentication, encryption or digital signatures Organizations are moving to a more open security model to support external parties, a virtual workforce and stronger Forefront Identity Manager offers a number of opportunities to consolidate duplicate processes, simplify the provisioning of Tokens, and streamline the user experience. HOW FOREFRONT IDENTITY MANAGER ADDRESSES THE PROBLEM Microsoft Forefront Identity Manager offers significant value in the area of Token and Certificate Management. In addition, the inclusion of a certificate and card management system differentiates Forefront Identity Manager from competing technologies. Multiple Tokens with Duplicate Provisioning Processes: Today, many companies have a badge that provides building access through a proximity device, and a Token that primarily provides remote network access. These badges and tokens are generally provisioned by two different groups. The ability 7 Let s Get Logical: The Convergence of Physical Access Control and Identity Systems, Burton Group, Mark Diodati; February 22, 2008 May Edgile, Inc All Rights Reserved

13 to combine these badges and tokens into a smart card (any physical device that enables a user to physically or logically authenticate a user) offer potential savings from a reduction in provisioning costs and reduction in badge/token costs. In addition, the user experience is enhanced. The Forefront Identity Manager provides capabilities for Card and Certificate Management as well as the ability for users to automatically provision the logical aspects of the smart card. Organizations can begin to purchase smart cards and issue those cards as physical access cards. The user can self-provision those cards through Forefront Identity Manager to act as Tokens for network access. The cards can act as one time password devices or have Certificates provisioned through Forefront Identity Manager. This allows users to have a single ID card for both logical and physical access while no longer having to have a separate provisioning process for the logical Tokens. Provisioning of Physical Tokens is Difficult and Distributed: Physical Tokens have to be provisioned locally to the user either in person or via mail. In addition to the physical Token, a Certificate is often required for the Token to function properly. By allowing the user to self-provision the Certificate to the Token, you significantly simplify the issues related to provisioning. Organizations that use smartcards today can significantly simplify the management of those environments. Certificates are Difficult to Manage for Both IT and the User: Certificates are digital IDs that provide a number of critical services including authentication, digital signatures and data protection. Most companies have far more Certificates than they realize, ranging from self-signed Certificates to thirdparty Certificates, and there are even departmental Certificate authorities that have been set up to solve specific problems. Certificates can cause a number of issues within the enterprise, if not managed properly, such as system failure or data loss. The management of Certificates is a significant challenge for many organizations. As the number and types of Certificates grow the complexity and potential for data loss or system failure can increase significantly. The Forefront Identity Manager capability to manage Certificates from any Certificate Authority can significantly reduce the issues related to certificate management. The inclusion of the Certificate and Card Management Capabilities inside Forefront Identity Manager provides a significant capability that is unique to Microsoft. The inclusion of this capability can be a significant source of value for an organization. VALUE EXAMPLES A large, integrated manufacturing firm replaced 4,500 one-time password devices with a dual purpose smartcard that provided both logical and physical access resulting in direct-monetary benefits $565,000 over a three-year time period due to lower cost tokens and consolidation of physical and logical access processes. A major manufacturer was able to reduce the number of full-time equivalents (FTE) required to support the smart card issuance and maintenance processes by In addition, it provided the capability to scale their smart card implementation with minimal additional support requirements as well as reduce the number of tokens/badges each employee is required to maintain. May Edgile, Inc All Rights Reserved

14 CONCLUSION The use of Forefront Identity Manager provides the opportunity to realize significant cost reductions and strategic business benefits. These benefits are realized through: Shorter Time to Value Enhanced User Experience Automated Provisioning and Access Requests Improved Audit and Compliance Simplified Certificate and Smartcard Management Organizations that have already chosen Microsoft as their strategic platform are uniquely positioned to realize these benefits by leveraging their existing technologies and skill sets to implement costeffective, user-friendly and easily maintained IAM processes. May Edgile, Inc All Rights Reserved