IAM IDMaaS I AM IDMaaS (Identity Management as a Service) is one of many services from CGI in the area of Identity and Access Management. The demand for identity management continuously grows since the IT landscape is more complex than ever before. To have control of identities is a key concern when it is no longer enough to rely on perimeter security infrastructure when protecting organizational resources. To introduce an on-premises identity management solution is a complex and resource intensive project. It takes time to build infrastructure and knowledge which means it might take significant time before the solution brings value to the business. A solution to this is to buy identity management as a service, which means the organization can focus on the business processes for identity management and not on the deployment of the infrastructure. This brings value to the business in a much shorter time! FACT SHEET IAM IDMAAS – COST EFFECTIVE IDENTITY MANAGEMENT IAM IDMaaS is a very cost effective identity management solution which brings great value to business in a short time. Lifecycle management Access provisioning Reports and auditing Password management User self-service Organization IDMaaS Automated identity management based on source system data Easy to deploy life cycle management Gives increased quality and more effective provisioning of accesses Includes report functionality and auditing Uses standard components for integration Improved end user experience providing user self service Password management with secret questions WELL DEFINED IDENTITY MANAGEMENT MODULES IAM IDMaaS exists of a number of pre- and well defined base services and a number of add-on services. Since the base services are well defined and are using standard components no further development is needed. This also means that they are very fast to deploy. Examples of base services is lifecycle management including provisioning of base accesses for two managed systems (Active Directory and another optional LDAP directory), standard workflow process and self-service for password management including management of secret questions. cgi.se © 2013 CGI GROUP INC. The add-on services are all possible to add independent of each other. Examples of these services are one extra target system, approval workflow, management of privileged accounts and request for access self-service. Using the IDMaaS from CGI also demands no or very little change in the customer IT environment. EASY INTEGRATION TO SOURCE SYSTEM Integration to a source system for identity data is a fundamental component to automate identity management, and oneDet integration is included in the base services. IDMaaS uses standard components to build this integration and therefore this process is really fast to deploy. A simple file transfer from customer source system to IDMaaS is all that is needed! ABOUT CGI Founded in 1976, CGI is a global IT and business process services provider delivering high-quality business consulting, systems integration and outsourcing services. With 72,000 professionals in 40 countries, CGI has an industry-leading track record of ontime, on-budget projects, aligning our teams with clients’ business strategies to achieve top-to-bottom line results. STANDARD COMPONENTS FOR INTEGRATION Integration to managed target systems is built using standard components and requires little or no development, which means that for every extra target system the deployment time is very short. For the most target systems no change of customer IT environment is needed. PRIVILEGED ACCOUNT MANAGEMENT It is very common in every IT environment that accounts with high privileges is created and never suspended when no longer needed, and also that passwords on these accounts are never changed. To increase security, management of these accounts is needed. IDMaaS offer an add-on service called Privileged Account Management. With this service it is possible to define a pool of privileged accounts for a specific system. These accounts are owned by one user but shared among several administrators. The service also includes user request for privileged access self-service. COST CONTROL To deploy an identity management solution is very resource intensive; it takes quite a lot of resources to create the infrastructure and it takes time to build the technical knowledge for the identity management platform. Besides of this it is common that licensing costs for the software and servers used is added. The price for IDMaaS is based on per managed user. In the base cost for every user all base services are included. With IDMaaS no expensive implementation project, licensing or knowledge building is needed. This gives very good control of costs when deploying an identity management solution. Also, value to business is added in a much shorter time! Contact Information IAM Access Manager and other IAM services: Tina Frithiof +46 40 6933597 email: IAM.sales.se@cgi.com For more information about CGI, visit www.cgi.se. IDMaaS Source systems Workflows Target systems Rules & policies Cloud HR Active Directory Tracking & audit LDAP Notification cgi.se © 2013 CGI GROUP INC.