HP Automates Infrastructure Outsourcing Provisioning Processes with Oracle Identity Manager

1. HP Automates Infrastructure Outsourcing Provisioning Processes with Oracle Identity Manager Doug Young - CISSP Lead Architect, HPOctober 14, 2009

2. Unleash your full potential with HP and Oracle • Converge your infrastructure • Modernize your environment • Increase efficiency

3. Agenda: • Overview • HP view of security and its role in the business • The challenge of Identity Management • Oracle Identity Manager delivers process automation • The challenges of scale in an outsourced environment • Business drivers • Approach to solve issues of scale • Technical Solution Overview • PLACEHOLDER – Future Phases • Q & A and wrap-up

4. The Identity Challenge • User productivity • IT constraining business • Runaway administrative and help desk costs • Vulnerability of assets • Slow response to change and growth • Regulatory exposure • Islands of security and management Remote Employees IT Admins Employees Partners Suppliers Customers WebWeb ServersPortalJava App Custom DirectoriesMeta-DirectoriesVirtual Directories Non DigitalFacilities Equipment Entry Control Applications MessagingDatabases Business Services

5. Identity and Access Management Components Registration Creation ProvisioningSynchronization Termination An organization’s strategy for governing who authorized users are and management of their entitlements, privileges and access rights A process, not a product A mission challenge, not just an IT issue Customers Suppliers Partners Employees Remote Employees IT Admins Identity Management & Compliance Support Access Management Credential Management Authentication Process Policy Authorization PKI & EKM Roles Federation Tokens Entitlement Privilege & MaintenanceManagement Single Sign- On Biometrics Audit and Reporting WebWeb ServersPortalJava App Custom ServicesBusiness Services DirectoriesMeta-DirectoriesVirtual Directories Applications, MessagingDatabases Non DigitalFacilities Equipment Entry Control

6. IAM Environments & Solutions IN THE CLOUD • Managed Services • Subscription Models • As-a-Service models FROM THE CLOUD TO THE CLOUD • Customer Dedicated Solutions: • Consulting • Turnkey • Managed • Hosted • Leveraged Solutions: • Managed • Hosted • Multi-instance / tenant

7. Provisioning in a globally shared environment HP GLOBAL UNIQUE ID SERVICE CLIENT A USER ADMINISTRATION PROCESSES CLIENT B HP SECURITY ADMINISTRATORS CLIENT C HP MANAGED CLIENT INFRASTRUCTURE • 54 Million unique identity credentials • 1000 + distinct customers • Multiple global delivery hubs with mix of custom and standardized delivery tools and models • Disparate policies and process flows • User Administration processes often shared with 3rd party ITO providers ACCOUNT BASED USER ADMIN. PROCESSES CLIENT D CLIENT E

8. Business Drivers & Benefits • Investment Benefits • Lower TCO • Productivity gains • Process efficiencies & improvements • Improved time-to-provision • Ability to handle complex workflows • Significantly improved audit response times • Increased accountability for privileged users • Foundational platform for Identity-as-a-Service

9. Identity provisioning - Automation Challenges

10. Delivery Model Challenges Multi-Instance Service Multi-Instance Service Multi-Instance Service Client 3 Client 1 Client 2

11. Technical deployment challenges • Mapping multiple target accounts to one OIM account • Initial load of customers- connecting existing accounts to new OIM profiles • Provisioning one HP employee to multiple accounts • Mixed Mode Authentication: Two-factor based authentication for administrative access, standard authentication for end users

12. Oracle Identity Manager Technical Solution Overview

13. Oracle Identity Manager Solution Scope • Advanced User Management: • Employee • External • Customer Windows AD Exchange Local Windows Group Provisioning User Self-Service Manager Initiated Role Management File Feed Service Request Portal Compliance Support & Enterprise SOD Denied Strong Authentication Workflow System Integration Global Identifier • Access Management: • SSO • Federation Project Foundation Add-on Options

14. Architectural View Customer 1 Customer 2 Web Server Tier Customer 1 Application Server Tier DB Tier Customer 2 Customer 1 Customer 2

15. Managing Security & Privacy Concerns • Web Server • Load Balancer • Database Server • All Server Hardware • VM Ware Host (ESX) • Networks • SAN • Website • OIM Software Instance • Database Instance Dedicated Shared Security in a shared environment • Privacy of system and data • Trans-border data flow & servicing requirements • Regional and country privacy regulations • Legal and privacy reviews for each customer instance Privacy

16. 9 Future Phases

17. While at Oracle OpenWorld…. • Visit HP in Moscone South, Booth #1301 • Assess your IT environment – for a chance to win an HP Mini Netbook! • Take the TCO Challenge • Applications Modernization Assessment • Storage and Server Assessment • Adaptive Infrastructure Maturity Model • ERP Optimization Assessment