Comments on: The case for identity management http://www.techleader.co.za/alwynvanniekerk/2008/05/14/the-case-for-id-management/ Thu, 17 May 2012 12:51:55 +0000 http://wordpress.org/?v=2.2 By: Tech Leader » Alwyn Van Niekerk » Identity-management pitfalls http://www.techleader.co.za/alwynvanniekerk/2008/05/14/the-case-for-id-management/#comment-24098 Tech Leader » Alwyn Van Niekerk » Identity-management pitfalls Wed, 21 May 2008 06:04:51 +0000 http://www.techleader.co.za/alwynvanniekerk/2008/05/14/the-case-for-id-management/#comment-24098 [...] article one and two I made the case for identity-management (IdM) and how an IdM solution can address the [...] […] article one and two I made the case for identity-management (IdM) and how an IdM solution can address the […]

(Report abuse)

]]> By: Alwyn Van Niekerk http://www.techleader.co.za/alwynvanniekerk/2008/05/14/the-case-for-id-management/#comment-24048 Alwyn Van Niekerk Wed, 14 May 2008 10:37:14 +0000 http://www.techleader.co.za/alwynvanniekerk/2008/05/14/the-case-for-id-management/#comment-24048 IdM is a fantastic set of tools that provide roughly 20% of the overall solution, with the remaining 80% consumed by people and process as you pointed out. In my experience the technology is the easy part of the solution, with a lot of time spent with business and other systems just to get to the point where you can start deploying part of the solution. IdM tools alone will not solve your problems, and an IdM project is typically not a short project either (although you can typically start delivering ROI early on if you plan correctly) I will delve deeper into the 80% of people and process in the follow up articles to this one, as it's arguably the most important part contributing to the overall success of any IdM project. IdM is a fantastic set of tools that provide roughly 20% of the overall solution, with the remaining 80% consumed by people and process as you pointed out.

In my experience the technology is the easy part of the solution, with a lot of time spent with business and other systems just to get to the point where you can start deploying part of the solution. IdM tools alone will not solve your problems, and an IdM project is typically not a short project either (although you can typically start delivering ROI early on if you plan correctly)

I will delve deeper into the 80% of people and process in the follow up articles to this one, as it’s arguably the most important part contributing to the overall success of any IdM project.

(Report abuse)

]]> By: Samantha Perry http://www.techleader.co.za/alwynvanniekerk/2008/05/14/the-case-for-id-management/#comment-24044 Samantha Perry Wed, 14 May 2008 10:04:56 +0000 http://www.techleader.co.za/alwynvanniekerk/2008/05/14/the-case-for-id-management/#comment-24044 The problem, as one financial company's CIO pointed out to me the first time I covered IdM, is users. As he put it: "Who are these people?". An audit had revealed thousands of ghost users, while the IT department was under the impression that it had a very firm handle on things. Before IdM must come an audit. Tracking down each individual user, and the permissions they have, and who has permission to assign those permissions. The business needs to get involved here, and frequently doesn't. They see it as a tech problem. So ja - my short view on why IdM hasn't taken off as it should. Personally I think everyone should be implementing it, but IdM is way easier said than implemented for most organisations. The problem, as one financial company’s CIO pointed out to me the first time I covered IdM, is users. As he put it: “Who are these people?”. An audit had revealed thousands of ghost users, while the IT department was under the impression that it had a very firm handle on things.

Before IdM must come an audit. Tracking down each individual user, and the permissions they have, and who has permission to assign those permissions.

The business needs to get involved here, and frequently doesn’t. They see it as a tech problem.

So ja - my short view on why IdM hasn’t taken off as it should. Personally I think everyone should be implementing it, but IdM is way easier said than implemented for most organisations.

(Report abuse)

]]>