IBM Software Demos Tivoli Identity Manager and Directory Integrator Integration

Transcription

1 Tivoli_Identity_Manager_Directory_Integrator_Integration_D_Dec05 1a 0:13 IBM Tivoli security management solutions address two critical e-business challenges: automated identity management and security event management. The IBM Tivoli identity management solution helps you quickly realize ROI by rapidly bringing, systems and applications online, while effectively managing users, access rights and privacy preferences throughout the identity lifecycle. 1b 0:40 This demonstration takes us through a typical account management lifecycle scenario and shows how Tivoli Directory Integrator and Tivoli Identity Manager work together to automate the creation, maintenance and deletion of user accounts. 1c 0:55 The demo is built around a fictional financial institution called Open Financial Network or OFN. OFN, like many e-businesses is concerned about security for both intranet and internet environments. 1d 1:10 OFN has their own Human Resources application called "MyPeople" to keep track of employees and uses an IBM DB2 database for employee data. Tivoli Directory Integrator monitors database updates and forwards relevant changes to Tivoli Identity Manager. I. Hiring a new employee 2a 1:30 We begin as the company decides to hire a new employee. 2b 1:35 As an member of the HR staff we will add the new employee to the HR system. The new employee will also be hired into the HR organization as an HR associate. Click the New button to create a new employee record First Name: Heather Last Name: Mann Choose HR Associate from Job Title list Choose Helena Peoples from Supervisor/Manager list Click the Active radio button Click the OK button 2c 1:47c In the background, IBM Tivoli Directory Integrator is monitoring the HR database. When Directory Integrator sees the new employee record, it notifies Tivoli Identity Manager. Launch IBM Tivoli Identity Manager Login in as ITIM Manager with any password you like. Visit: for more demonstrations Page 1 of 5

2 Click on the My Organization tab at the top of the page. Click on the plus sign (+) in front of Open Financial Network to expand the tree. Click on the text link HR in the tree. 2d 2:00 Identity Manager has received notification of the new hire and will automatically create all the appropriate user accounts for the new employee named Heather. click on Manage Accounts 2e 2:10 The accounts created are based on her job role. Since Heather is in the HR organization, her accounts are created with permissions appropriate to HR. click on HR in menu tree to return to the Manage People page for the HR department. Launch the MyMail mail application. login as HMann" 3a 2:30 We see here that Heather is notified of her new accounts. The s from Identity Manager inform her of her new account IDs and passwords. click on the message New Account Information from IBM Tivoli Identity Manager 3b 2:42 Next, Heather is going to access the corporate Intranet. Launch the OFN corporate intranet web page. 3c 2:46 In order to do her job, she needs to access the HR pages on the corporate intranet. The HR page is protected by Tivoli Access Manager. Heather now logs in using her new account and password. click on HR (restricted) under Links again, login using the first initial and last name of the employee ("HMann"), and any password you like click the OK button 3d 3:02 Heather has access to this page because Tivoli Identity Manager provisioned her account to have instant access to HR content on the intranet. click on Home 4a 3:13 Heather now tries to access the restricted IT page. Visit: for more demonstrations Page 2 of 5

3 click on IT (restricted) 4b 3:19 As we see here, Access is denied click BACK BUTTON to return to intranet home page II. Changing the employee s role ensure our new employee is selected and click the Modify button 5 3:28 Here, we see her being transferred into the IT organization Choose IT Associate from Job Title list Choose Ivan Turing from Supervisor/Manager list Click the OK button 5c 3:33 In the background, Tivoli Directory Integrator detects the change and notifies the Identity Manager. 5d 4:43 Identity Manager now moves Heather out of the HR organization and into the IT organization. click on IT in menu tree> 5e 3:53 It will automatically update Heather's accounts to reflect her new job. 6a 4:04 Once again, Heather accesses the corporate intranet 6b 4:09 she tries to link to the HR restricted page. return to the OFN Intranet window... click on HR (restricted) under Links Visit: for more demonstrations Page 3 of 5

4 enter password & click OK button if prompted 6c 4:14 This time, access is denied because she is no longer in the HR organization. Tivoli Identity Manager has updated her intranet login permissions to reflect her new job. click Back button 6d 4:27 However, since she is now a member of the IT organization, she can access the IT restricted page. click on IT (restricted) click Home to return to intranet home page III. Denying access to a terminated employee 7a 4:36 As the final part of this demonstration, Heather decides to leave the company and an HR staff member sets her employee status to "terminated". ensure our new employee is selected and click the Modify button Choose Terminated from Employee Status radio set click OK 7b 4:49 Directory Integrator detects the change and notifies Identity Manager. 7c 4:55 We now see that Heather's status has changed to "Inactive". click on Manage Accounts 7d 5:01 In addition, all of her accounts are also set to "Inactive". click on IT in menu tree to return to the Manage People page for the IT department. return to the OFN Intranet window click on IT (restricted) under Links enter password & click OK button if prompted 7e 5:13 Visit: for more demonstrations Page 4 of 5

5 From this point in time, Heather can no longer use her account to login to the corporate intranet. return to the MyMail window click on Get Mail button (2 new mails are added) click on the message Your account has been suspended by IBM Tivoli Identity Manager 7f 5:26 Tivoli Identity Manager now notifies Heather that her accounts have been suspended. IV. Deleting the employee from the system 8a 5:41 When Heather's departure is complete, an HR staff member deletes Heather from the HR system. click Delete button 8b 5:50 Identity Manager receives notification that Heather is to be deleted and all of her accounts are de-provisioned. Conclusion 8c 6:00 As you have just seen, the integration of IBM Tivoli Identity Manager with a proprietary HR system can provide a robust automatic life cycle management solution to effectively manage users, access rights and privacy preferences. Visit: for more demonstrations Page 5 of 5