WIPRO IDENTITY CLOUD UNLEASHING THE NEXT GENERATION OF IDENTITY AND ACCESS MANAGEMENT (IAM)

Transcription

1 WIPRO IDENTITY CLOUD UNLEASHING THE NEXT GENERATION OF IDENTITY AND ACCESS MANAGEMENT (IAM)

2 Table of Contents 03...Introduction 04...Wipro Cloud (WIC) as a Service Type 05...Wipro Cloud Capabilities & Features 06...Traditional IAM vs. Wipro Cloud 06...Wipro Cloud (WIC) - A Deeper Look 07...Critical Differentiators 07...Solution Benefits 07...Conclusion

3 Introduction As we race into the future, more and more sensitive data and critical resources are being ported online and it is becoming critical to protect access to these online data and resources with strong authentication. Traditional in-house user ID and password are not enough with the current technologies such as phishing, man-in-middle attack, and brute force attacks. With increasing compliance regulations and privacy policies, it is becoming more difficult for organizations to develop internal applications and integrate with Software as a Service (SaaS) applications. Online services are increasing and delivered in every enterprise to a wider group of users including employees, contractors, partners and its customers. Planning and implementing a full-blown and Access Management (IAM) architecture in an enterprise scaled to user, access and entitlement limits; highly available and disaster recovery ready is time consuming, expensive and sometimes inaccurate, and takes a few iterations to get it right. There is always a need to compromise between identity access, and enterprise identity management expanding to suppliers/traders/consumers and access. In the current era, organizations need tools to extend user access and identity to everything, like Software as a Service (SaaS) apps and mobile devices, while still integrating with existing investments in Active Directory and traditional Windows applications, says Gregg Kreizman, an Access Management Analyst at Gartner Inc., a Stamford, Conn.-based research firm. available budget and business requirements for IAM, in the long run, when there is a product acquisition and subsequent sunset, or an upgrade to a very different architecture, such sunk costs are rarely recoverable. Also, enterprises have to ensure they manage identities and access of a diverse user base including identities accessing online services, BYOD Gartner estimates that by the end of 2014, and Access Management as a Service (IDaaS) will account for 25% of all new and Access Management (IAM) sales, compared to less than 5% in

4 An extract from Gartner analyst on the various IAM Service types: Professional IAM Customized & Access Management (IAM) platform One-time fees Highly customized to meet enterprise needs High initial & on-going investments; thus costly Long implementation cycle Difficult to maintain Managed IAM IAM platform owned by the customer Delivered and managed by provider(s) Monthly recurring fees Achieves Cost/ROI balance between automation and manual operations Takes longer to stabilize particularly in situations where operation is being consolidated Enterprises not immune to IAM technology issues as a Service IAM platform owned, delivered and managed by provider(s) Pay-for-use or Usage-based subscription Predictable user based cost Quicker to deploy and automate Advantageous for automating IAM for external & other types of users More standardized processes with limited customization Wipro Cloud (WIC) as a Service Type Ability to deliver and Access Management (IAM) capabilities using an enterprise-grade service as a multi-tenant SaaS solution providing consumerized experience, addressing current & future IAM needs of both large & emerging enterprises. Wipro Cloud is an and Access Management (IAM) TM solution powered by CA CloudMinder that eliminates traditional IAM challenges and delivers all the benefits of a Software as a Service (SaaS) model. It is based on ITIL compliant processes and helps organizations accomplish their security, compliance and risk management objectives with a "pay-as-you-go" pricing model. Offering superior scalability and significant savings on TCO as compared to traditional IAM deployments, enterprises can now quickly tap into a ready to use IAM solution across applications hosted in-house, within a private cloud or across public cloud based SaaS applications seamlessly. 04

5 Management User Management Provisioning & Synchronization Self Service Access Requests Optional On-Premise Connector Reporting /Auditing CA CloudMinder Management Advanced Authentication Secure Software Credential CA ArcotID Risk Detection and Prevention Rules & Modeling Engine CA CloudMinder Advanced Authentication Federated SSO Standards based Federation Just-in-time Provisioning Reporting & Auditing CA CloudMinder Single Sign On Privileged Mgmt. Governance Management Advanced Authentication Federated Single Sign On Cloud Platforms CloudMinder Partners SaaS Apps Customers Employees CA CloudMinder Bridge On-Premise/Private Cloud Management Governance Access Management Information Protection Fig 1: Wipro Cloud Solution Architecture Wipro Cloud Capabilities & Features Capability Management as a Service Federated SSO as a Service Advanced Authentication as a Service Solution Feature Provisioning to Cloud and On-Premise Applications: Enable end users with self-service, profile creation, password reset, and forgotten password and user name. JIT Provisioning: Real-time account creation to a target system, and then SSO into the app. Federated Registration: Self-register your identity in the service through the third party IdP. OOTB IdPs include Google and Facebook. Others such as B2B IdPs can be configured. Single Sign On (SSO) into Cloud and On-Premise Apps: Enable single sign on and single logout across federated security domains through the CloudMinder portal. Standards-based Federation: Support for Security Assertion Markup Language (SAML) as well as OAuth, OpenID, WS-Federation, and WS-Trust facilitates federation to a wide range of partner websites. Social Support: Allow users to utilize a Facebook or Google social identity to register and sign into the CloudMinder portal. Strong Authentication: Credential enrollment, ArcotID PKI Roaming Authentication with Q&A/OTP, ArcotID PKI Authentication with various ArcotID clients (JavaScript, Flash), ArcotID OTP authentication. Risk based Authentication: Arcot Risk OTP with Q&A, Fraud Detection (IP/location, and Machine IP based) 05

6 Traditional IAM vs. Wipro Cloud Traditional enterprises have relied on manually intensive user management operations & homegrown IAM solution to improve efficiency of user management operations. While managed service model is also prevalent, both the in-house and managed models are complex, time-consuming, resource-intensive and offer limited scalability, leading to high total cost of ownership. On-premise solution typically does not support rapid adoption of cloud services and can t provide secure data exchange and management across diverse user base. Wipro Cloud is a hosted multi-tenant and Access Management platform to help businesses accomplish their security, compliance, and risk management objective with a predictable pay-as-you-go pricing model. Wipro Cloud (WIC) - A Deeper Look Area WIC On Premise Infrastructure Bundled in pay-as-you-go pricing Upfront investment Support Non Productive Environments Customization Managed Service (SLA based) Included Limited possibilities Provided internally by stretching, cross training resource Upfront investment More possibilities but not advised! Also limited by the COTS product features. Functionality Compliance on all functional elements Compliance on all functional elements Scalability Effectively unlimited Limited by server capacity Patching Patches applied by Managed Service Require costly contractors or generalists to implement Upgrades Upgrades implemented within defined SLA based days of release Upgrades require implementation time and cost 06

7 Critical Differentiators Wipro solution combines the power of a user provisioning solution with the convenience of a cloud-based service, providing robust capabilities for user provisioning and de-provisioning to on-premise apps and cloud services as well as comprehensive user management capabilities. Employing Wipro s solution can also help accelerate deployment time as well as reduce the ongoing costs associated with managing a traditional on-premise application. Combining the proven capabilities and scalability of our solution with the cloud can help you maintain business agility and operational efficiency while simultaneously minimizing administrative overhead. Our solution offers: SaaS Infrastructure: Wipro hosts and manages data center and provides solution as a SaaS solution that can be integrated with on-premises solutions Compliance Adherence: Service adheres to various compliance regulations and data privacy laws for protection of data including SAS 70 Type II (SSAE 16) Certified and ISO Certification Best security processes and using leading edge technology, systems and software Industry standard SLA with 24x7x365 support and operations Enable SAML/WS-Federation based SSO between distributed (on-premise or SaaS) applications and the central Federation Hub on WIC The cloud hub is a multi-tenant SaaS offering, and is available for consumption on a per user per year chargeable basis. Wipro will work with the customer to define service delivery for additional/optional on-premise components as required. Solution Benefits Deploying this solution in the cloud means you can be up and running faster while minimizing the ongoing overhead of managing related infrastructure, software or facilities. This unique combination can provide a better experience for end users while reducing operational overhead. Helps business to maximize return on investments by: o Providing great customer and partner experience o Streamlining the business processes o Rapid deployment and efficient scalability to reduce time to market Significant savings by: o Reducing TCO for customers o Fixed operating cost with pay-as-you-go model thereby reducing uncertainties in cost o Eliminating overhead of administrative task o Low/no effort & costs involved in IAM platform setup, HW/SW maintenance & upgrades Services are compliant to EU data protection law and audited for SSAE 16 Robust & scalable SaaS platform Conclusion Wipro Cloud is secure, scalable, reliable, and simple, helping enterprises and organizations to reduce their total cost of network ownership so that enterprise focuses on their business and not on their network. For more information please visit or us at ess.presales@wipro.com 07

8 DO BUSINESS BETTER NYSE:WIT OVER 140,000 EMPLOYEES 57 COUNTRIES CONSULTING SYSTEM INTEGRATION OUTSOURCING Wipro Technologies, Doddakannelli, Sarjapur Road, Bangalore , India Tel: +91 (80) , Fax: +91 (80) , info@wipro.com North America South America United Kingdom Germany France Switzerland Poland Austria Sweden Finland Benelux Portugal Romania Japan Philippines Singapore Malaysia Australia China South Korea New Zealand WIPRO TECHNOLOGIES 2013 No part of this booklet may be reproduced in any form by any electronic or mechanical means (including photocopying, recording and printing) without permission in writing from the publisher, except for reading and browsing via the world wide web. Users are not permitted to mount this booklet on any network server. IND/RB/OCTOBER2013- OCOTBER2014