Saturday, March 21, 2009

Some More Details About the



This is the Account Identity screen for the Sun Identity Management. will explain you all that how it come in the browser. and how you create and manage all about Account

Resources - Identity Management Systems

Resources

When user has to access Any thing thats called resources, and it also can be any thing, like Computer Systems, Data Storage, external devices etc....So thata user can access N-Number of Resources, so that Identity Manager create one Virtual identity for that like A- User from a Software Co. can Access Laptop, Server, Data Base Server, RSA-Security Card and many more, here Idenity manager map user with all the resources and create one Virtual identityIn Genral Corporate Sector's users are grouped into functional departments or geographical divisions. Each of these departments typically requires access to different resources. In Identity Manager terms, this type of group is called an organization.and in the Organization particular Division has to bind with specific user through Some Role.Identity Manager system, you assign roles to user accounts to facilitate efficient enabling and disabling of access to resources.

Users and Account Management

A user is anyone who holds an IdentityManager system account. or an Identification of any thing, and that is unique number or value.
IdentityManager stores a range of data for each user. Collectively, this information forms a user’s IdentityManager identity.
this identity could be user name or accout ID or any thing which has to be unique valaue and identfy the individual in any system like
Bank Account Number, Employee ID, Windows User ID, or any thingw which represant the uniqueness of the systems.

Identity Manager Overview --- ||||

Sun Identity Manager allows you to manage and audit access to accounts and resources. with the help of IDM Tools so that you can do periodic and daily user-provisioning and auditing tasks, Identity Manager provide services for internal and external customers

Goals of the Identity Manager System

  • Manage account access to a large variety of systems and resources
  • Securely manage dynamic account
  • Set up delegated rights to create and manage user account
  • Handle large numbers of enterprise resources, as well as an increasingly large number of extranet customers and partners
  • Securely authorize user access to enterprise information systems
  • Data in Synchronized format
  • Define audit policies
  • Conduct periodic access reviews
  • Monitoring and auditing

So Finally Every things is just move around three things,USER >>>> & Resources & Its Management ( How you manage both Resource and user )

Link for the Sun Identity Management Product

Idenity Manager Product

Sun Idenitity Management - 4 Main Products

Sun Java Identity Manager

  • Compliance
  • Provisioning Systems
  • Create Virtual Identity
  • Automated Synchronization
  • Scalabality
  • Role Based Provisioning
  • Password Management
  • Delegated Administration
  • update-enabling / Disabling of Account

Sun Java Access Manager

  • Centralized Access Control
  • Single Sign On on Same DNS
  • CDSSO (Cross Domain Single Sign On)
  • it Works on Application / Webservices
  • Authentication / Authorization
  • Role & Policies
  • Liberty /SAML

Sun Java Fedration Manager

  • Business Outsourcing
  • N-Number of partner Involvement & share Same Resources
  • Worked on partner Network
  • Access trusted Domain

Sun Java Directory Server

  • Secure & Central Repository
  • Identity Profile
  • Access Privilage
  • Application & Network Resources
  • Load Balancing
  • Automatic Failover
  • Firewall like Security
  • Data Distribution

Identity Management

Identity management (ID management) is a broad administrative area that deals with identifying individuals in a system (such as a country, a network, or an enterprise) and controlling their access to resources within that system by associating user rights and restrictions with the established identity. The driver licensing system is a simple example of identity management: drivers are identified by their license numbers and user specifications (such as "can not drive after dark") are linked to the identifying number.
In an IT network, identity management software is used to automate administrative tasks, such as resetting user passwords. Enabling users to reset their own passwords can save significant money and resources, since a large percentage of help desk calls are password-related. Password synchronization (p-synch) enables a user to access resources across systems with a single password; a more advanced version called single signon enables synchronization across applications as well as systems
In an enterprise setting, identity management is used to increase security and productivity, while decreasing cost and redundant effort. Standards such as Extensible Name Service (XNS) are being developed to enable identity management both within the enterprise and beyond.
In a wider context, industry groups such as the World Wide Web Consortium (W3C) and The Open Group are developing standards that would enable global identity management, in which each individual would be uniquely identified, and all applicable data would be linked to that identity. A position paper on the W3C Web site, Requirements for a Global Identity Management Service, maintains that establishing global identity management is crucial for the development of the Web and Web services. The W3C position paper stipulates, among other things, that such a system that must be universally portable and interoperable; that it must support unlimited identity-related attributes; that it must provide adequate mechanisms for privacy and accountability; and that it must be overseen by an independent governing authority.