Identity and Access Management

Dir Identity

Identity Management and GovernanceUser and Access Management aligned with Business Processes
The Challenge
Business relationships are growing more complex, blurring the line between internal and external business processes. More and more users have access to enterprise
IT systems – and the pressure is on to enable every oneof these users to maximize productivity while ensuring
privacy, compliance and cost control. The cloud, which
is high on the agenda of many but which creates potential security issues, complicates this already challenging
security situation. In this fast changing business environment, effective identity management and governance isimperative – for enterprise security and for business success. Traditionally, IT departments have deployed identity management to increase efficiency and reduce costs.
Now, business relationships and compliance are predominant. Managing and securing business processes
requires the consistent administration of users, roles andentitlements across applications and in business partner
networks. Giving the right people the right access to theright resources at the right time for the right reason isessential for protecting corporate data, and for enablingusers to be innovative, productive, responsive, compliantand cost-effective.

Our Solution
DirX Identity from Eviden is a comprehensive solution fortoday’s demanding business environment. It aligns IT, business and executive management in the lifecycle management of users and their access rights. For IT, DirX Identity
provides automated user provisioning, for business and general management, DirX Identity offers improved governanceand risk management, and for executive management,

DirX Identity provides analytics and reports essential forsteering and control functions. Process-driven, customizable,cloud-ready, scalable and highly available, DirX Identity is theidentity management and governance solution that organizations need for today and tomorrow.

Process-driven and Integrated Solution for
Identity Governance and Provisioning
Key Strengths

Your Benefits

User Management

An accurate and up-to-date directoryof users to facilitate the assignment ofprivileges.

Role Management

A logical layer for modelling and management of privileges, supporting role
hierarchies, and context-based granular entitlements.

Access Certification

Ability for responsible parties toverify that roles and entitlements areassigned to users in compliance.

User Self-service

The freedom for users to manage own
data records and passwords, request
privileges, monitor request status, anddelegate access rights to other users.

Delegated Administration

Responsibility is passed to designatedadministrators to manage specified
user groups and access rights.

Management of organizational data(business objects)

Entities maintained that are relevant
for, and related to, identity management processes, such as organizational
units, locations, cost centers, and projects.

Request Workflows

Ability for requesting and approving
privilege assignments and attestation,and user and role creation and modification via multi-step configurable
workflows

Policy Management

Security and administrative policies
maintained, such as provisioning policies to grant and revoke privileges
automatically.

Real-time Provisioning

Privilege assignments resolved into
target system-specific entitlements,
and user accounts and their entitlements are managed in target systems.

MetadirectoryManagement of central password
policies and reset user passwords byadministrators, and users can maintaina single password for multiple applications.

Management of Shared Accounts

Management and control of how users
access shared privileged accounts.

Identity
Manager

Identity
StoreSpeeds up user deployments
Reduces complexity and manages
risks
Supports ongoing processes for risk
management and compliance
Supports quick and easy adaption ofidentity management processes tocustomer requirements
Provides for seamless integration withIT Service Management (ITSM)
Allows management of ERP and IT systems centrally and consistently

Domain management

Helps manage heterogeneous environments, and allows for integration
in horizontal (incl. cloud solutions like
Office365 or Salesforce) and verticalsolutions (PLM, healthcare, physicalaccess, unified communication)

Target system managementProvides generic interfaces based onSCIM (System for Cross-domain Identity Management) to integrate any typeof application

Integrated and synchronized directories, user databases and other repositories to provide consolidated andconsistent data.
High-level separation of DirX Identity
data for multi-tenant support is maintained and customized.
Integration of applications and systems
as data sources and provisioning targets are maintained.

Identity Web services

Password Management andSynchronization

Provides cost-effective automatedadministration of users and entitlements

Identity management functionality
provided, as RESTful Web services
for integration in portals and custom
applications.

Delivers excellent data management
capabilities to cleanse, consolidate andkeep identities up-to-date
Delivers continuous and resilient services for business critical deploymentswith high-availability and scalability
options

Compliance

Supported risk management and mitigation to avoid or control violation ofsecurity policies, allowing for enforcing.

Business Access

Admin Access

WS/REST- Application

Identity
Services

Identity
Services

Integration
Framework

Scheduling

PolicyExecution

Web Services andIdentity Web API

Notification

RoleResolution

Connector Integration
Framework

RequestWorkflows

Risk
Assessment

Agent Integration
Framework

Supervisor

Provisioning
Workflows

Auditing, Logging& Monitoring

Certification
Campaigns

AgentsandConnectors

SCIM 2.0, SPML, LDAP, SOAP, Messaging

Identity Management and Governance Service Architecture

Eviden is a registered trademark © Copyright 2023, Eviden SAS – All rights reserved.

FS-230605-GW-DirX-Identity_Factsheet-EN

TargetSystem…

TargetSystem