<Insert Picture Here> Oracle I&AM: Service Oriented Security - a flexible Security Foundation For Next-Generation Applications

Transcription

1 <Insert Picture Here> Oracle I&AM: Service Oriented Security - a flexible Security Foundation For Next-Generation Applications Christian Patrascu, Principal Product Manager Oracle Fusion Middleware

2 Agenda Introduction: Identity and Access Management <Insert Picture Here> Trends in the Area of I&AM: - From Access Management towards Risk Management - Roles and User Lifecycle Management - Looking Ahead: Identity as a Service

3 Agenda Introduction: Identity and Access Management <Insert Picture Here> Trends in the Area of I&AM: - From Access Management towards Risk Management - Roles and User Lifecycle Management - Looking Ahead: Identity as a Service

4 Identities are Pervasive. Joe s Fish Market.Com Tropical, Fresh Water, Shell Fish, Lobster,Frogs, Whales, Seals, Clams

5 ..& integral to Processes Company Planning / Forecast Sales / Marketing Order Process Supply Chain Product Logistics Finance Reporting business process SAP Siebel IFS Web Portal icad Oracle Finance IBM / Cognos Applications New Employee: User Credentials Roles Others.. Product Manager with Management Responsibility Outlook BS File Sv....

6 Regulations Increase the Importance Impact Basel II Financial Services Time

7 Oracle Security Infrastructure Internal Users Partners / Suppliers or local authorities Fraud D. & Strong Auth. Access Control Web Service Security External Users (Economy, Citizens) Provisioning & Role Mgt. Synchronization of User Identities Data Audit, Compliance Governance, SOD Directory Service Federation Partners / Suppliers or local authorities

8 Oracle Security Infrastructure Internal Users Oracle Enterprise Single Sign On Oracle Adaptive Access Manager Fraud D. & Strong Auth. Oracle Access Access Control Manager Oracle Enitlements Server External Users (Economy, Citizens) Synchronization of Oracle User Identities Role Manager Oracle Identity Provisioning Manager & Role Mgt. Oracle Virtual Directory Oracle Internet Directory Audit, Compliance Governance, SOD Directory Service Partners / Suppliers or local authorities Oracle Web Service Manager Web Service Security Oracle Database Vault & Audit Oracle Data Adv. Security Enterprise User Security... Partners / Suppliers or local authorities Oracle Identity Federation Federation

9 Agenda Introduction: Identity and Access Management <Insert Picture Here> Trends in the Area of I&AM: - From Access Management towards Risk Management - Roles and User Lifecycle Management - Looking Ahead: Identity as a Service

10 Access Management: Real Life Usecases Porter Public Sector Admin. Building Software Company CVC Other Companies Reception...

11 Access Management: Real Life Usecases Porter

12 Access Management: Real Life Usecases

13 Adaptive Access Management Example - BT Customer App Phase I: ID Verification Service Discrete BT Services End user

14 Adaptive Access Management Example - BT Customer App Phase II A: ID Verification Service End user Fraud Prevention BT Managed Fraud Reduction Services

15 Adaptive Access Management Example - BT Customer App Phase II B: OSB ID Verification Service End user Fraud Prevention BT Managed Fraud Reduction Services

16 Adaptive Access Management Example - BT Phase III:

17 Adaptive Access Management Example - BT. Functionality: Parameter of Real Time Risk-score calculation : Origin of transaction e.g. registration from black-listed country or entity Multiple registrations from same device Location e.g. user transacting from a new device Previous behaviour: Impossible travel: 5 Minutes ago Munich; now Bucharest Unusual activity e.g. user normally makes small payments to a consistent set of payees but not is about to transfer entire balance to a just-created payee Cross-channel fraud. E.g. contact details changed via call centre immediately before unusual web transaction

18 Agenda Introduction: Identity and Access Management <Insert Picture Here> Trends in the Area of I&AM: - From Access Management towards Risk Management - Roles and User Lifecycle Management - Looking Ahead: Identity as a Service

19 Provisioning with the help of the 7 Samurai:... Roles Have a Long History

20 OIM with the help of the 7 Samurai: Kambei Kyuzo Gorobei Katsushiro Heihachi Shichiroji Kikuchiyo seven Samurai x three Resources = 21 Assignments

21 7 Samurai are using the OIM Kambei Kyuzo Gorobei Katsushiro Heihachi Role Samurai Policy Samurai : Sword Equipment Trainer Shichiroji Kikuchiyo seven Samurai + Policy + three Resources = 11 Assignments

22 The Chief is also using the OIM Policy Chief : Role Chief Sword Equipment Castle tōryō Tom Cruise Yul Brynner External Samurai Role Villagers The Villagers

23 Agenda Introduction: Identity and Access Management <Insert Picture Here> Trends in the Area of I&AM: - From Access Management towards Risk Management - Roles and User Lifecycle Management - Looking Ahead: Identity as a Service

24 Oracle ebus Suite Serice Oriented Security Building Applications Oracle JDE Siebel / Peoplesoft. 3 rd Party Dev. Application SAP Application Design Development Packaging Management & Administration Runtime Integration Deployment Legend: Authentication Authorization

25 Oracle ebus Suite Serice Oriented Security Building Applications Oracle JDE Siebel / Peoplesoft. 3 rd Party Dev. Application SAP Application Identity Services Framework. Legend: Authentication Authorization

26 Serice Oriented Security Oracle Fusion Applications & Middleware 3 rd Party ISF Aware Applications Custom Developed ISF Aware Applications Legacy Applications User Management Authentication Authorization Federation Identity Services Authentication Oracle IAM Suite with Identity Services Framework Service Interfaces Authorization WS-*, SPML, SAML, XACML, CARML Provisioning Administration Enterprise Identity Management Infrastructure Policy & Orchestration Identity Provider Role Provider Legacy Integration Interface Connectors, Agents Audit Federation & Trust Virtualization & User Store

27 Leader in Magic Quadrants Oracle assumes the No. 1 position - Earl Perkins, Perry Carpenter, Aug (Research G ) User Provisioning, H Web Access Management, H Magic Quadrant Disclaimer: The Magic Quadrant is copyrighted by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for

28 Market Reports Burton & Forrester Oracle is currently leading the provisioning market IBM and Sun have both lost market share to Oracle Oracle continues to increase in mindshare while broadening its IdM portfolio. - VantagePoint 2008: Identity and Privacy Trends

29 29

30 Thank You! Christian Patrascu