Agenda

 The Dutch Government is implementing several basic registrations which can and must be used by all governmental administrations, local as well as provincial and national. These basic registrations are meant to be the unique authentitive source of relevant data, like name and kinship-relations, addresses, income, etc.

Identities have a life in the sense that they are created, registered, used and deregistered. Identity management is about supporting efficient recognition and authentication of people, entities and organizations in computer network environments. It is often forgotten that identity registration is just as important as identity authentication for the overall authentications assurance. Various jurisdictions and organizations have defined authentication frameworks that specify policies for the life cycle of identities and their use in authentication. This talk will present the general components that authentication framework should contain, and go through a set of prominent authentication frameworks from around the world, including from the US, UK and Australia.

A brief look at the identity and organizational data management at EnBW. How to solve typical issues in the field of a business driven idm with the help of modern methods and open standards based on a service oriented architecture.

IAM process modelling as constant challenge for IT Projects & Roadmaps Cornerstones and enhancements of Henkels IAM portfolio Positioning of IAM processes as business processes & workflows Towards GRC with a comprehensible request & workflow management.

Presentation first suggests as the basis for Identity management value model the usage of Identity transactions. Identity transactions is defined as sum of rights requests + sum of amounts of rights delivered. Additionally, each transaction is given a euro sum value which results into tangible value delivered by IDM.

The presentation next discusses the relevant parts of the role based access management model implementation that bring most value as based on the IDM value model. Discussed elements are e.g. different kind of approval flows, inherited membership approvals, privileges inheritance, delegated management of privilege and role structures, traceability of current permissions/permissions under approval or delivery/historical permissions, inheritance of the membership constraints in the role hierarchy, possibility to reconcile memberships with the target systems in case manual provisioning is used.