eAuthentication Components of USDA’s Enterprise Architecture

1. eAuthentication Components ofUSDA’s Enterprise Architecture February 2004

2. USDA eAuthenticationSome Statistics • In January • 76 New Users/Day • 480,000 Logons • 3.5 Mill. Visited Prot. Sites • 102 H.D. Calls/Day • 1o and 2o Host Sites • Assurance Level 1 & 2 • 61,000 Users • 70 Integrated Applications • 40 More Applications in Queue • 6,800 Certified LRA’s • 99% Up Time • C&A Complete • ATO Received • NFC – Certified CA • CAF Complete

3. eAuthentication Component – USDA Enterprise Architecture Customers Employees Partners Citizens Federal Partners AGENCY COMMON ENTERPRISE-WIDE EXTERNAL Business Layer Homeland Security Grants *Wildland Fire Mgmt Loans Global Trade *Program Evaluation (Budg/Perf Integration) Grants Health Loans *Health Loans Recreation Resource Mgmt Asset Sales Disaster Mgmt Homeland Sec *Disaster Recovery and Business Resumption HR Mgmt Financial Mgmt Asset Sales Global Trade Training HR Mgmt Civil Rights Financial Mgmt Training Recreation Resource Mgmt Civil Rights Supply Chain Mgmt (Acq) Supply Chain Mgmt Application Layer eAuthentication Config Mgmt eAuthentication e-Grants Enterprise Loan Sys *Common Customer Stmt Benefits *Fire Geospatial Reporting On-line Rulemaking Agency Org Portals Enterprise HR App Computer Emergency Notification System (CENS) e-Records DisasterHlp e-Learning *Living Disaster Recovery Planning System (LDRPS) e-Training *Business Gateway Travel Geospatial One-Stop e-Travel Agency Business Applications FirstGovPortal Civil Rights Financial (Corporate Financial Management System) (CFMS) Security Security *Public Health Surveillance H R On-Line e-Grants USA Services Departmental Portal Recreation 1-Stop Recruit 1-Stop Asset Mgmt Data Layer Content Mgmt Asset Mgmt Commodity Inventory Intl Trade WorkFlow/Corresp Mgmt e-Payroll Agency Web Content Agency DBs Commodity Information IAE Federal Rule DB Procurement (IAS) Collaboration Loans Agency Document Content Agency Financial Data Marts Government Wide Authentication Credentials Loan DBs Shared Web Content *Fire DBs Training Content Records Geospatial DB Grant DBs Technology Layer Financial D/W *Health DBs HR DBs Universal Telecommunications Network Regional and Metropolitan LANs *Agency Telecomm *Desktop Infrastructure Secure Networks *Extranets *Web Farms *Data Centers Standards and Policies Security Version 1.05

4. eAuthentication Component – USDA Enterprise Architecture Customers Employees Partners Citizens Federal Partners AGENCY USDA eAuthentication Service EXTERNAL People Layer User Communities Change Management Board Infrastructure Team eA Steering Committee AWG Local Registration Authorities eA Help Desk eAuthentication PMO Agency Integration Team FICC Operations Team Credential Working Group Human Resources CSPs Processes Layer Authentication Risk Assessment Agency Integration Training Credential Assessment Framework Standards – Assurance Level Agency Configuration Management Role Management Registration/ID Proofing Standards – Identity Proofing Help Desk Agency C&A/COOP Change Management Certificate Issuance Operations Management Configuration Management C&A/COOP Certificate Issuance Presentation Layer Webfarm Telecommunications & Security Stack Webfam Telecommunications & Security Stack Agency Applications Department Portal Department Applications First Gov Portal Registration/Identity Proofing Login Interface Partner Applications Administration Interface Identity Mgmt Interface Data Layer Agency Customer Users Users & Roles Policies Application Trust List Employee/HR Data CRL Log Files Credential Trust List CSP Users Technology Layer Identity Minder Site Minder Web & Application Server Standards SAML Based CSPs Forms Tool Standards Active Directory WebLogic Entrust CA Entrust getAccess Webfarm and eAuthentication Service Standards and Policies Webfarm Telecommunications & Security Stack Version 1.04

5. CMB eA Steering Committee Gov. Users Customers Business Integration Team Ops Team Infr. Team Help Desk AWG FICC eA PMO CAF Working Group CSPs Agency Application Owners LRA HR LRA Training Tool usda.gov Identity Proofing eDeployment Administration IdentityManagement eLearning eTravel eAuth.usda.gov Login Registration UMARS Registration Oracle Sybase Agency HR Data CAMS Employee Data Agency User Data CSP User Data Log Files NFC Employee Data CRL Entrust CA Users User Data Rules Policies Trust List eAuthentication Component – Conceptual Technical Architecture AGENCY USDA eAuthentication Service EXTERNAL People Layer Change Management Ops Mgmt. Config Mgmt. Presentation Layer Integration Training Registration/Proofing Certificate Issuance Role Management First Gov Agency Applications Agency Applications Webfam Telecommunications & Security Stack Webfarm Telecommunications & Security Stack Tech Layer CA Framework Assurance Level Standards Formata IdentityMinder WebLogic Risk Assessment Identity Proofing Standards FileNet Netegrity Web Agent SiteMinder GetAccess Configuration Management Agency C&A/COOP Data Layer Active Directory Webfarm and eAuthentication Service Standards and Policies Webfarm Telecommunications & Security Stack