Monday May 12, 2014

Modernizing UK Government with Aurionpro Sena

Around the world governments are transforming to deliver online citizen services and gain economies of scale by removing silos across departments. For many people, the images of government include: long lines, lots of paper work, and bureaucracy. While taxes continue to rise, the quality of service has continued to lag. A study by McKinsey showed that 50% of citizens are demanding access to government services on the weekends and many governments are stepping up to address the need. The UK government is setting the example for efficiency with a digital services strategy. In a recent newsletter article, Aurionpro Sena shares how Identity and Access Management initiatives in the UK government are de-fragmenting the infrastructure that connects people and removing roadblocks to collaboration. As a result, the UK government is now an innovation center.

The first phase of the initiative is modernizing 25 services delivered by 14 agencies across 8 government departments. The results so far are amazing. The report estimates that moving services from offline to digital channels will save the UK government £1.7 and £1.8 billion per year.  If you are interested in reading the strategy document, click here.

Our partners at Aurionpro Sena have been busy working closely with the Cabinet office on their deployment and documented the results in a recent newsletter article. Using Oracle's Identity Management, Aurionpro Sena started working with a number of UK government departments in 2013 to design, build, and support a federated identity shared service that could be securely hosted within a Public Service Network (PSN) accredited data center. The resulting service, Aurionpro's Public Sector Internal Identity Federation (PSIIF) Hub will enable easier sharing of information across the public sector, increasing the security of data access and enabling public sector organizations to realize savings across the government's information and communications technology (ICT) program. The PSIIF hub is now available for procurement through the government's Cloudstore. Full article here.

The GDS (Government Digital Services) organization produced the video below as a demonstration of the services being rolled out. These examples are inspirational and will change the way we think about government. One day we may scarcely remember that renewing your driver's license meant taking a day off from work to go to the DMV (Department of Motor Vehicles) to take a number and wait for your name to be called. Calling the state tax office only to be transferred to multiple people who couldn't help you will be a story told in a medieval history class. Click to enjoy the video of the Sprint Alpha Transformation Demo from GDS on Vimeo.

Friday May 09, 2014

Three User Friendly Strategies for BYOD Security

For most CIO's, securing corporate data on mobile devices is top of mind. With enterprises producing more data than ever before in human history, much of that data will be accessible via mobile devices and mobile applications. In fact, studies suggest that 80% of enterprise access will be via mobile devices by 2020 vs. just 5% today. Amit Jasuja's recent article on the Forbes Oracle Voice, discusses three strategies for CIO's that can reduce the risk and simplify the user experience.

Wednesday May 07, 2014

Deploying the Oracle IAM Suite with the Deployment Wizard - by Alex Stanciu (IDMWORKS)

With the release of Identity & Access Management suite R2 PS2 (11.1.2.2.0), Oracle has released a new deployment tool, called the Oracle Identity and Access Management Deployment Wizard, to automate the installation and configuration of products related to the IAM suite.



With the Deployment Wizard, you can fully automate the installation, configuration and integration of WebLogic Server, SOA Suite, Oracle Identity Manager, Oracle Access Management, Oracle Unified Directory, Oracle HTTP Server and Webgates. The tool allows you to select one of three deployment topologies: OIM, OAM or OIM integrated with OAM and OUD. As an Oracle Partner in this space, IDMWORKS has taken our extensive experiences in this field and pulled together a detailed paper on the usage of this Deployment Wizard that will help to give insight to those of you looking for help in understanding how to take advantage of the latest capabilities from Oracle in the deployment of Oracle's Identity and Access Management offerings. For this detailed whitepaper, please follow the link to the IDMWORKS website


Monday May 05, 2014

Is Mobility Creating New Identity and Access Challenges? - by Marcel Rizcallah

Are mobile, social, big data and cloud services generating new Identity and Access Management challenges? Guest blogger Marcel Rizcallah is the EMEA Domain Leader for Security at Oracle Consulting and today will highlight some of the new IAM challenges faced by customers with Cloud services and Mobile applications.

Sales force users ask more often for iPad or mobile devices to access Cloud services, such as CRM applications. A typical requirement is to use an AD or corporate directory account to login seamlessly into the Cloud service, either with a web browser or a downloaded application on a device. The benefits, compared to a different login/password provided by the Cloud provider, is more security and better identity governance for their organization; password policy is enforced, CRM services are granted to sales people only and Cloud accounts are de-provisioned immediately when people leave.

Integrating a mobile device browser with the intranet is easily addressed with federation solutions using the SAML standard. The user provides his login and password only once and tools such as Oracle Mobile Security Suite and Oracle Access Manager provide the end-to-end integration with the corporate directory.

Authenticating through a downloaded application provided by the Cloud service may be more complex; the user authenticates locally and the device application checks first the credentials in the cloud environment. The credentials are relayed to the organization’s intranet using REST services or standards such as SAML to validate the credentials.

Integrating IAM services between SaaS applications in the Cloud and the corporate intranet may lead to a weird situation. Let’s look at this example: one of my customers discovered that their CRM SaaS application, provided by a public Cloud environment, was supposed to be SAML compliant, yet did not correctly generate one of the SAML messages when authenticating through a downloaded application on the device. Despite all parties agreeing that this is a bug, fixing the Cloud application was not an option because of the possible impact on millions of Cloud customers. On the other hand, changing the Oracle Access Manager product, fully compliant to SAML 2.0, was not an option either. The short term solution would be to build a custom credential validation plug-in in Oracle Access Manager or an integration tool, such as Oracle API Gateway to transform the wrong message on the fly! Of course this should not stay a long term solution!

When we ask customers which SSO or Identity Governance services are the priority for integrating Cloud SaaS applications with their intranet, most of them says it’s SSO. Actually SSO is more urgent because users want to access Cloud services seamlessly from the intranet. But that’s the visible part of the iceberg; if Cloud accounts are not aligned to employees referential or sales force users, customers will end up paying more license fees to the Cloud provider than needed. SSO with Oracle Access Manager will improve customer experience, but cloud provisioning / de-provisioning with Oracle Identity Governance will optimize Cloud costs.

Use the following links to learn more about Oracle IDM products and Oracle Consulting Services for IDM.
About

Oracle Identity Management is a complete and integrated next-generation identity management platform that provides breakthrough scalability; enables organizations to achieve rapid compliance with regulatory mandates; secures sensitive applications and data regardless of whether they are hosted on-premise or in a cloud; and reduces operational costs. Oracle Identity Management enables secure user access to resources anytime on any device.

Search

Archives
« May 2014 »
SunMonTueWedThuFriSat
    
1
2
3
4
6
8
10
11
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
       
Today