Tivoli Identity Manager Express Tivoli Access Manager for

Tivoli Identity Manager Express Tivoli Access Manager for Enterprise Single Sign-On (Product Demonstrations) Tivoli Live! – 15 June 2006 Srdjan Ljubisavljevic (srdjan@uk. ibm. com) David H Wood (davidh_wood@uk. ibm. com) © 2006 IBM Corporation

IBM IT Service Management Tivoli Security Portfolio IBM Tivoli Identity Manager Express Federated Identity Manager Access Manager for e. Business Access Manager for OS Access Manager for BI Access Manager for ESSO Directory Server Directory Integrator Security Compliance Manager Neu. Secure Data. Power 2 © 2006 IBM Corporation

IBM IT Service Management What’s Hot in Tivoli Security in 2006? IBM Tivoli Identity Manager Express IBM Tivoli Access Manager for ESSO 3 © 2006 IBM Corporation

IBM IT Service Management IBM Tivoli Identity Manager Express 4. 6 Description: –ITIM Express is a simple, secure identity management solution that helps companies manage passwords, user accounts, and access permissions. It provides a single point to manage user identities, manage approvals for accounts and ensures services are available to those who are authorized. Delegated self-care administration provides rapid time-tovalue and enables companies to quickly respond to change. Key Customer Benefits: – Easy to install, deploy and manage thereby generating a rapid ROI – Centralized approvals and documentation of access approvals to facilitate compliance – Reduce administrative costs and increase business process efficiencies Who: –Mid-market companies (< 5000 users) and department’s within larger enterprises 4 © 2006 IBM Corporation

IBM IT Service Management ITIM Express 4. 6 – Key Features § § § § § 5 Request-based provisioning with approval workflow User self-care and password management Intuitive GUI Recertification of user access rights Installed/Bundled adapters Out-of-the-box reporting Email notification HR Feeds Manual Service Account reconciliation © 2006 IBM Corporation

TIM Express Demo © 2006 IBM Corporation

IBM IT Service Management Sign-On Terminology § Single Sign-On § Common Sign-On § Reduced Sign-On § Password Synchronization 7 © 2006 IBM Corporation

IBM IT Service Management X 8 © 2006 IBM Corporation

IBM IT Service Management IBM Tivoli Access Manager for Enterprise Single Sign-On § IBM Tivoli Access Manager for ESSO - our enterprise single sign-on solution and serves as the base for the components below Additional ESSO Components – Desktop Password Reset Adapter - component that allows users to reset their Windows password from a locked workstation – Authentication Adapter - component that allows flexible authentication for the base ESSO product using tokens, smart cards, biometrics and passwords – Provisioning Adapter - module that allows provisioning systems to directly distribute user credentials (usernames and passwords) to TAM for ESSO – Kiosk Adapter - component that terminates inactive sessions and applications in Kiosks and shared workstations; essential for hospitals and similar environments 9 © 2006 IBM Corporation

IBM IT Service Management The Tivoli Enterprise Single Sign-on Suite TAM for ESSO Desktop PW Reset Adapter TAM for ESSO Provisioning Adapter Console Tivoli Identity Manager Directory/ DB Password TAMeb PKI TAM for ESSO Core User TAM for ESSO Biometrics Token/ smart card User Auth Windows Web sites Authentication Adapter 13289576 SECURID 10 Sign On TAM for ESSO Kiosk Adapter User’s Desktop Sign Off Mainframes Application Sign-On © 2006 IBM Corporation

TAM ESSO Demo © 2006 IBM Corporation

IBM IT Service Management Taking Our Own Medicine § IBM Tivoli Directory Server – Blue Pages (> 300 K entries) § IBM Tivoli Security Compliance Manager § IBM Tivoli Access Manager for e. Business – access to w 3. ibm. com portal § IBM Tivoli Access Manager for ESSO – on TAP § Etc. 12 © 2006 IBM Corporation

IBM IT Service Management 13 © 2006 IBM Corporation

IBM IT Service Management 14 © 2006 IBM Corporation