Quest One Identity Solution. Simplifying Identity and Access Management

Transcription

1 Quest One Identity Solution Simplifying Identity and Access Management

2 Identity and Access Management Challenges Operational Efficiency Security Compliance Too many identities, passwords, roles, directories, etc. Manual processes Repetitive tasks End-user inefficiency Non-secure authentication practices Lack of control over privileged accounts Inconsistent and ineffective security policies Delays in de-provisioning Orphaned accounts Lack of visibility into IAM actions and effects Controlling access Enforcing separation of duties Establishing and enforcing consistent and compliant policy Proving compliance Assessing the impact of IAM actions

3 Simplifying Identity and Access Management Quest One simplifies identity and access management to increase security, efficiency, and compliance by consolidating critical non- Windows systems into AD, unifying major aspects of IAM, automating identity administration, securing important systems, while enabling compliance through access control and separation of duties with complete visibility and control driven by identity intelligence and business objectives.

4 Quest Software enables you to simplify identity and access management to: Improve efficiency through automating identity administration, codeless provisioning, business-driven identity intelligence, and consolidation of identity infrastructure based on an existing investment in Active Directory Enhance security by controlling access enterprise-wide, based on unified and intelligent identities and roles, and by implementing stronger authentication for multiple systems, including smart cards and tokens, while enabling control of privileged accounts Achieve compliance with powerful, integrated audit, reporting, and enforcement tools, identity intelligence, and identity unification for access control and seperation of duties

5 Intelligent and Unified IAM Doing it better with Quest One: Consolidate identities Automate processes Driven by identity intelligence

6 Quest One for Single Sign-on Simplifying Identity and Access Management

7 Quest One for Single Sign-on Quest One delivers ideal single sign-on for each and every system, platform, and application in your enterprise. Quest One leverages AD Kerberos to eliminate redundant passwords entirely and deliver true SSO for standards-based platforms and applications. Quest One also provides ADbased enterprise single sign-on optimized for non-standard and proprietary systems.

8 Single Sign-on Unix, Linux, and Mac systems full citizens in AD Java, SAP, and other standards-based apps authenticate with AD logon Enterprise single sign-on for systems that cannot join AD Benefits: Fewer password resets Increased security User satisfaction Dramatically increased efficiency for users and IT

9 Single Sign-on The Quest One Approach

10

11 Quest One for Provisioning Simplifying Identity and Access Management

12 Quest One for Provisioning Quest One helps you improve efficiency, enhance security, and enable compliance through automated, codeless, businessdriven provisioning of user identities, group memberships and access privileges enterprise-wide empowered by identity intelligence. Quest One overcomes the typical cost, deployment, and complexity shortcomings of traditional IAM frameworks by enabling enterprise provisioning at a fraction of the cost and complexity..

13 Provisioning Codeless provisioning, enterprise-wide User and line-of-business self service Consolidate identities to streamline provisioning Automate manual process (across systems) Base provisioning on roles Control provisioning with identity intelligence Benefits: Deploy enterprise provisioning in months (not years) Improve efficiency through automation Improve security Achieve compliance

14

15 Quest One for Role Management Simplifying Identity and Access Management

16 Quest One for Role Management Quest One helps you implement role-based access control by providing an optimized structure and automation to address all of your enterprise role management needs. Quest One empowers you to granularly define and administer roles, as well as attach business-driven access control, policy, workflows, and attestations to roles to meet security, efficiency, and compliance objectives.

17 Role Management Manage roles with structure and automation Roles driven by business processes Role lifecycle management Role-based access control Role mining Benefits: Increase security Achieve RBAC (or ABAC, or rules-based, etc.) Satisfy compliance demands Unify roles enterprise-wide

18

19 Quest One for Identity Intelligence Simplifying Identity and Access Management

20 Quest One for Identity Intelligence Quest One consolidates all roles, actions, policies, rights, and resources into a single, well-controlled, and infinitely flexible IAM structure that dynamically adjusts as needs and systems evolve. Quest One provides you with control over and a clear view of all IAM components empowering you to make sound decisions based on intelligence which helps reduce risk.

21 Identity Intelligence Unified basis for all IAM tasks 360⁰ visibility and control Business-driven IAM Role, policy, and workflow-centric Benefits: Creates a common ground for IAM enterprise-wide Empowers you to implement IAM as you need Correlates identity and roles with entitlements and policy Dynamically adjusts to changing environments

22

23 Quest One for Multifactor Authentication Simplifying Identity and Access Management

24 Quest One for Multifactor Authentication Quest One delivers multifactor authentication to improve security and achieve compliance over username/passwords. Quest One builds on existing investments to deliver all the security and control you need without requiring additional infrastructure and redundant management tools and practices while integrating with a wide range of IAM tools.

25 Multifactor Authentication AD-based OTP Token agnostic One OTP solution for Windows, Unix, Linux, and Mac Extend Windows smart cards to Unix, Linux, Java Initiate enterprise SSO with any strong authentication option Benefits: Save money Increase security Achieve compliance

26

27 Quest One for Password Management Simplifying Identity and Access Management

28 Quest One for Password Management Quest One addresses the most pressing password management issues facing complex heterogeneous enterprises: the high cost of password resets, inconsistency of password policy, and the problems of multiple, disparate passwords. Quest One enables you to meet your password management objectives while addressing the underlying problems, cost-effectively, securely, and without requiring additional infrastructure.

29 Password Management Reduce the number of passwords Strengthen password policy enterprise-wide Empower users to rest their own passwords Augment passwords with strong authentication Benefits: Reduce the password burden on IT Increase security Achieve compliance Improve user satisfaction

30

31 Quest One for Privileged Account Management Simplifying Identity and Access Management

32 Privileged Account Management Quest One controls administrative access through granular delegation, policy-based control, and secure and automated workflows for issuing privileged credentials. This approach improves efficiency while enhancing security and compliance as administrators are granted only the rights they need nothing more/nothing less and all activity is tracked and audited.

33 Privileged Account Management Delegate administrative access Audit administrative access Base elevated access on existing roles and policy Benefits: Eliminate the keys to the kingdom problem Create a proactive compliance stance Unify privileged account management

34

35 Quest One for Optimizing an IAM Framework Simplifying Identity and Access Management

36 IAM Framework Optimization Quest One improves the efficiency and effectiveness of an identity and access management framework by reducing the amount of custom coding required for enterprise-wide IAM, accelerating framework deployment, optimizing enterprise-wide administration, providing a rapid path to a uniform role and policy structure, adding identity intelligence, and adding specific IAM functionality the framework lacks.

37 IAM Framework Optimization Consolidate identities/directories Optimize IAM for the AD environment Streamline deployment Accelerate time-to-value Fill functionality gaps Single sign-on Multifactor authentication Privileged account management Add identity intelligence

38

39 Questions?