Agenda

As a major provider of insurance services in the Dutch market, Achmea had the requirement to implement best practice IT governance in the area of user management across their business critical systems as they migrate from mainframe to an SAP software strategy. This session describes the key enabling decisions that Achmea had to make to realize their Identity Management vision and how they are winning the support of the many internal stakeholders that their Identity Management strategy – based on SAP NetWeaver Identity Management – will touch.

Identity Management has become mature over the last years. From its technical beginnings it evolved to a more overarching concept: the integration of business and IT. With this trend new demands arose. Data quality, information owners, system and business roles have to be aligned within the organisation. HR-based business role assignment and sophisticated user self-services promise to be beneficial for the enterprise. This talk will present observations on these topics and will show future trends. Examples from different projects will illustrate existing implementations.

Most IAM experts claim that good IAM-Governance is a cornerstone of successful and compliant IAM. But what is "IAM-Governance" and what are relevant aspects?

Marko Vogel explains how IAM-Governance can be defined and what the key elements are. He discusses the different central and decentral responsibilities on various levels (e.g strategic, tactical) including the responsibilities of senior management. Furthermore, he shows how the enforcement of IAM policies can be monitored to ensure compliance with corporate standards. Marko Vogel illustrates his conclusions with practical project examples. .

Consumer-to-business identity on the internet has potentially many advantages for all parties involved. The take-off however is slower than many people expected. This talk analysis the benefits and risks for consumer identity, especially from the perspective of online service provider (relying party). It discusses market entry and business model issues, the role that trust frameworks can play, privacy and user aspects (including user centric identity) and different approaches to regulation. Two Dutch consumer identity initiatives will be used as use-cases in this talk: OpenID.nl+ for low-trust identity, and the High-trust Consumer Identity for the financial sector initiative.