Track VIII: Best Practices

Moderator:

Virtual Directories

United Nations Development Programme (UNDP) ? Deploying a Global Identity Infrastructure

In this client presentation the author would like to share his experience approaching an Identity Management initiative in the public sector. The Presentation explains why among all other IAM components at UNDP, the virtual directory was the one of the first to adopt. Virtual directories help to "prepare" infrastructure for implementation of more complex components such as User Provisioning and Federated Access where formalization of all processes is the key factor to success. Virtual Directories can be plugged into the infrastructure seamlessly helping to overcome issues with different data formats and schema deviation. They are very useful for upgrade and migration processes as well as for data format unification.
Implemented at UNDP in 2006, virtual directories serve as a glue for several data stores, propagating fractional account information to LDAP and non-LDAP stores and perform a highly available load-balancing front-end for accessing UNDP's Identity stores.
The presentation contains a practical overview of the design, planning and deployment phases, outlines challenges and their possible resolutions.

Rollenmanagement

Organisationsbasiertes Rollenkonzept - Der Einfluss der Unternehmensstrukur auf das Rollenkonzept

Dieser Vortrag zeigt die Umsetzung eines an der Unternehmensstruktur orientierten Rollenkonzepts bei der Österreichischen Post.

Rollenbasierte Berechtigungsvergabe bei der Raiffeisen Schweiz

In dieser Session wird die bei der Raiffeisen Schweiz gewählte Vorgehensweise für die Realisierung eines Rollenmanagements aufgezeigt. Dabei wird sowohl die gewählte Vorgehensweise als auch der Stand der Implementierung beschrieben.

Large-scale Identity Projects

Complex Corporate Structure, M&A, Outsourcing, Restructuring ? Addressing Major Employee Lifecycle Management Challenges at Bell Canada Enterprises

RBAC, Role Mining

ABN Amro - A best practice case for implementing Role Based Access

This session introduces the project at ABN Amro for implementing Role Based Access Control across the entire enterprise. The core focus of this project has been to meet the compliance and security targets, especially with focus on SOX.

Federation Leading Edge

Federation - Are We Ready? BT´s 21st Century Networks (21CN) Project

As a large organisation with many partners BT has been looking at federation as a mechanism for improving security and reducing costs. This presentation looks at BT's experiences as it implements some federated partnerships, and some of the issues that are still to be resolved (for example, defining trust)?