Srdjan Ljubisavljevic ( srdjan@uk.ibm ) David H Wood ( davidh_wood@uk.ibm )

1. Tivoli Identity Manager Express Tivoli Access Manager for Enterprise Single Sign-On(Product Demonstrations)Tivoli Live! – 15 June 2006 Srdjan Ljubisavljevic (srdjan@uk.ibm.com) David H Wood (davidh_wood@uk.ibm.com)

2. Tivoli Security Portfolio IBM Tivoli Identity Manager Identity Manager Express Federated Identity Manager Access Manager for eBusiness Access Manager for OS Access Manager for BI Access Manager for ESSO Directory Server Directory Integrator Security Compliance Manager NeuSecure DataPower

3. What’s Hot in Tivoli Security in 2006? IBM Tivoli Identity Manager Express IBM Tivoli Access Manager for ESSO

4. IBM Tivoli Identity Manager Express 4.6 Description: • ITIM Express is a simple, secure identity management solution that helps companies manage passwords, user accounts, and access permissions. It provides a single point to manage user identities, manage approvals for accounts and ensures services are available to those who are authorized. Delegated self-care administration provides rapid time-to-value and enables companies to quickly respond to change. Key Customer Benefits: • Easy to install, deploy and manage thereby generating a rapid ROI • Centralized approvals and documentation of access approvals to facilitate compliance • Reduce administrative costs and increase business process efficiencies Who: • Mid-market companies (< 5000 users) and department’s within larger enterprises

5. ITIM Express 4.6 – Key Features • Request-based provisioning with approval workflow • User self-care and password management • Intuitive GUI • Recertification of user access rights • Installed/Bundled adapters • Out-of-the-box reporting • Email notification • HR Feeds • Manual Service • Account reconciliation

6. TIM Express Demo

7. Sign-On Terminology • Single Sign-On • Common Sign-On • Reduced Sign-On • Password Synchronization

8. X

9. IBM Tivoli Access Manager for ESSO - our enterprise single sign-on solution and serves as the base for the components below Additional ESSO Components Desktop Password Reset Adapter - component that allows users to reset their Windows password from a locked workstation Authentication Adapter - component that allows flexible authentication for the base ESSO product using tokens, smart cards, biometrics and passwords Provisioning Adapter - module that allows provisioning systems to directly distribute user credentials (usernames and passwords) to TAM for ESSO Kiosk Adapter - component that terminates inactive sessions and applications in Kiosks and shared workstations; essential for hospitals and similar environments IBM Tivoli Access Manager for Enterprise Single Sign-On

10. TAM for ESSO TAM for ESSO TAM for ESSO TAM for ESSO TAM for ESSO TAM for ESSO Desktop PW Reset Adapter Authentication Adapter Provisioning Adapter Console Kiosk Adapter Core Directory/ DB 13289576 SECURID The Tivoli Enterprise Single Sign-on Suite Tivoli Identity Manager Password TAMeb Sign PKI Windows On User Web sites Biometrics Sign Mainframes Off Token/ smart card User Auth Application Sign-On User’s Desktop

11. TAM ESSO Demo

12. Taking Our Own Medicine • IBM Tivoli Directory Server – Blue Pages (> 300K entries) • IBM Tivoli Security Compliance Manager • IBM Tivoli Access Manager for eBusiness – access to w3.ibm.com portal • IBM Tivoli Access Manager for ESSO – on TAP • Etc.