Thursday May 31, 2012

The Business Case for a Platform Approach

Most customers have assembled a collection of Identity Management products over time, as they have reacted to industry regulations, compliance mandates and security threats, typically selecting best of breed products.  The resulting infrastructure is a patchwork of systems that has served the short term IDM goals, but is overly complex, hard to manage and cannot scale to meets the needs of the future social/mobile enterprise.

The solution is to rethink Identity Management as a Platform, rather than individual products. Aberdeen Research has shown that taking a vendor integrated platform approach to Identity Management can reduce cost, make your IT organization more responsive to the needs of a changing business environment, and reduce audit deficiencies. 

View the slide show below to see how companies like Agilent, Cisco, ING Bank and Toyota have all built the business case and embraced the Oracle Identity Management Platform approach.

Wednesday May 30, 2012

The Oracle Platform

Today’s enterprises typically create identity management infrastructures using ad-hoc, multiple point solutions. Relying on point solutions introduces complexity and high cost of ownership leading many organizations to rethink this approach. In a recent worldwide study of 160 companies conducted by Aberdeen Research, there was a discernible shift in this trend as businesses are now looking to move away from the point solution approach from multiple vendors and adopt an integrated platform approach. By deploying a comprehensive identity and access management strategy using a single platform, companies are saving as much as 48% in IT costs, while reducing audit deficiencies by nearly 35%.

According to Aberdeen's research, choosing an integrated suite or “platform” of solutions for Identity Management from a single vendor can have many advantages over choosing “point solutions” from multiple vendors. The Oracle Identity Management Platform is uniquely designed to offer several compelling benefits to our customers. 

  • Shared Services: Instead of separate solutions for - Administration, Authentication, Authorization, Audit and so on–  Oracle Identity Management offers a set of share services that allows these services to be consumed by each component in the stack and by developers of new applications 
  • Actionable Intelligence: The most compelling benefit of the Oracle platform is ” Actionable intelligence” which means if there is a compliance violation, the same platform can fix it. And If a user is logging in from an un-trusted device or we detect an attack and act proactively on that information.
  • Suite Interoperability: With the oracle platform the components all connect and integrated with each other. So if an organization purchase the platform for provisioning and wants to manage access, then the same platform can offer access management which leads to cost savings.
  • Extensible and Configurable: With point solutions – you typically get limited ability to extend the tool to address custom requirements. But with the Oracle platform all of the components have a common way to extend the UI and behavior

Find out more about the Oracle Platform approach in this presentation.

Tuesday May 29, 2012

Keeping Entitlements in Check

Thanks for going the webcast on keeping entitlements in check. As a follow up, I have attached the slides to the webcast. The webcast will be available on demand shortly via IOUG.   A few key takeaways:

  • Application security means applying both preventive and detective controls. Audit and security groups need the combination of both access certification and runtime dynamic authorization.
  • Today, security policy is largely fragmented and brittle to change. The result is audit exposure for highly regulated applications. 
  • By addressing the entire value chain of application security with a comprehensive platform approach, organizations can reduce the risk and improve compliance. 


Wednesday May 23, 2012

Oracle at Gartner Security & Risk Management Summit

June 11 – 14, 2012
Gaylord National Hotel & Convention Center
201 Waterfront Street
National Harbor, MD 20745
Register Now!
Oracle Sponsored Event

Oracle is proud to be a Platinum sponsor of the Gartner Security & Risk Management Summit 2012 taking place June 11 – 14, in Washington DC. 

This year's Gartner Theme is  "Strategic Roadmaps to Secure the Enterprise and Reduce Risk"

A comprehensive security & risk event
The summit is the only time when the entire Gartner analyst and security and risk management community come together in one location to bring the latest research, insights and forward-thinking perspectives found nowhere else.

The summit features five in-depth programs and more than 140 sessions, and provides the ability to collaborate and network with peers, hear inspiring keynotes and gain immediate take-aways you can apply back to the office.

Oracle Highlights
Attendees at the Gartner Security & Risk Management Summit 2012 will also have the opportunity to meet and interact with Oracle Security experts throughout the event.  Meet an Oracle expert face-to-face or stop by the Oracle booth and see Oracle’s products and solutions.

Be sure to attend Oracle’s session, Checkmate: Data is King, on Tuesday, June 12, at 9:30 a.m. in Potomac Ballroom 1.

Register Now!
Oracle Sponsored Event
To view the agenda and to find out more about the Gartner Security & Risk Management Summit visit

Monday May 21, 2012

CSO Roundtable Amsterdam

This lunch event gives senior security executives across different industries an opportunity to hear Oracle’s formula for cyber-security and to hear from Chris Gavin, Vice President Information Security, Oracle Corporation as he shares more insights into:

  • Oracle’s information security best practices
  • Information security in a “bring your own device” to work culture
  • Securing cloud, mobile and social access.
  • Security as a business enabler
  • Responding to cyber-security threats

An organization’s brand and reputation is built up through the years but can also be severely damaged or even destroyed by a single security incident. The media coverage around these information security breaches underscores just how devastating these failures can be to an organization’s reputation. Reach out to your sales rep if you would like to attend.

Sunday May 20, 2012

Amit Jasuja Talks About Securing Applications

Securing applications is complex because it involves providing the right level of visibility to auditors, application owners and developers. Application security has primarily been hard coded into applications and difficult to change. In addition, auditors have a difficult challenge verifying security controls for applications. The complexity has left applications vulnerable to fraud and audit violations. By taking a platform approach to application security, Oracle provides all of the components to address the application security value chain. See the embedded slides below.

Friday May 18, 2012

Demo: Intelligent Role Discovery with Oracle Identity Analytics

In a growing enterprise where employee roles constantly evolve, Certifying access to thousands of systems and millions of entitlements is challenging. As users change job roles changing access rights can be a nightmare.

Role management can effectively address this challenge and make access control consistent and manageable for a large and constantly changing universe of users. But organizations must first define roles as the basis for access control – a monumental task especially in organizations that have large numbers of users spread across multiple applications.The traditional method for defining roles is to use spreadsheets which is ineffective, time-consuming, and expensive.

To address this challenge, Oracle Identity Analytics offers the industry’s most advanced role governance solution that allows organizations to logically bucket users on the basis of their entitlements. Watch this demo to learn how Oracle Identity Analytics offers an advanced role governance solution to map users into roles allowing organizations to simplify user provisioning and reduce audit exposure.

Thursday May 17, 2012

Platform Approach to Identity in The Cloud

If you missed the webcast, you can register to view the on-demand version at this link:  Register Here.  There were a few questions during the webcast and we have captured the answers below. In addition, you can find an embedded copy of the slides below as well.

1. How is data privacy handled in a cloud identity solution and can you share any thoughts especially on cross-border privacy restriction?

A: Private data is not stored in the cloud. As part of the implementation, the PII data and sensitive information is filtered so that confidential information is not used.

2. Can you describe how you have PeopleSoft integrated with OIM?

A: PeopleSoft is used to source new user identity information. There is not a provisioning connection back into PeopleSoft 

3. Do you still keeping some Manual ID provisioning? If does, is this because of some legacy plataforms dependencies or you are looking forward to migrate to Oracle IdM?

A: Yes. There is a process to do provisioning manually in the event the cloud environment is unavailable.

4. Can you provide some insight about how OIM and OIA help you to reduce audit findings due to the closed loop remediation process?

A: Today ManpowerGroup is not doing closed loop remediation, but this is a desirable end state and a next step. 

Wednesday May 16, 2012

Demo of Access Certification with Oracle Identity Analytics

Certifying employee access on a recurring basis can be a time consuming and complex process for business managers. Navigating access spreadsheets can take weeks and is error-prone. And certifiers can delegate reviews which breaches accountability To address this challenge, Oracle Identity Analytics offers the industry’s most advanced automated access governance solution. Watch this demo to learn how Oracle Identity Analytics accelerates access certification to improve productivity and streamline the audit process

Friday May 11, 2012

National University Melbourne Identity Platform Story

Wanted to share this video story on the platform approach taken by the University of Melbourne. Like most organizations, they started with a home-grown solution which was fragmented. By adopting a platform approach, which integrated administration and access management, they improved the reliably of their Identity Management program.

Wednesday May 09, 2012

Webcast:Manpower Platform Approach to Identity in The Cloud

While many identity management projects focus on employee access, Manpowergroup looks at identity management as a business enabler. In this Webcast, David Poll of Manpowergroup and Naynesh Patel of Simeio Solutions will discuss how an integrated "cloud" platform approach has helped streamline enterprise identity and access management for its North American group and its subsidiary brands:  Register Here.

Learn how to:

  • Unlock the potential of access and segregation of duty audit processes
  • Automate identity administration to enable business productivity
  • Use cloud managed identity management to improve operational efficiency

Tuesday May 08, 2012

Hardware and Software engineered to work together: Oracle Optimized System for Oracle Unified Directory

The Oracle Optimized System for Oracle Unified Directory (OOS4OUD) is a matched and tuned set of SPARC hardware and OUD software configured by the Optimized Systems Team and the Directory Team to deliver top performance.

The hardware consists of three SPARC T4-1 servers running Solaris 11 and using the integrated load balancer for redundancy and throughput.  Each T4-1 machine uses a Sun Storage 2500-M2 array connected using two fiber channel cards.

The team then tuned the Solaris OS configuration to take full advantage of the hardware and to support advanced features of the OUD software.

The resulting combination of high performance hardware, storage, next generation directory software and expert tuning is a highly scalable, redundant and secure directory platform.

You can read more on our OTN page here and on our solution page here.


Oracle Identity Management is a complete and integrated next-generation identity management platform that provides breakthrough scalability; enables organizations to achieve rapid compliance with regulatory mandates; secures sensitive applications and data regardless of whether they are hosted on-premise or in a cloud; and reduces operational costs. Oracle Identity Management enables secure user access to resources anytime on any device.


« May 2012 »