Driven by Identity: The State of Nebraska Takes the Lead With Help from Novell

Steven Hartman

Director, Nebraska Directory Services

State of Nebraska

Agenda

Introductions

Security Discussion

Business Overview / Architecture

Development Requirements

Demo

Question and Answer

Mission Statement

To serve the citizens of Nebraska by providing premier information technology leadership, policy and operations which facilitate an effective, responsive and efficient government.

Vision Statement

That the right people have access to the right data from anywhere, at anytime, from any device.

Security
How do we secure everything?

The Problem(s)

Web Users

Web Server

Apps

VPN, Dial-up,

Wireless Users

Apps

Users

Web Server

Access Control

Server

Apps

Admin

Netware/NT

Admin

OS/390

Admin

Unix

Admin

AIX, Solaris,

HP-UX, Linux, etc

OS/390

Netware

NT/2000

DMZ

The Solution

iChain

OS/390

Exchange

Linux

Solaris

NT/2000

Domino

NetWare®

Novell

eDirectory

Employees,

Citizens,

Suppliers

Authentication

Standard browser based access

Username and Password over HTTPS

Authenticate with UserID, or email

Multiple Authentication methods

One time passwords (within the same DNS domain)

X.509 certificates

NMAS Contextless Login

Access Rules may be assigned to

Groups

Users

Containers (O, OU, etc.)

Streamlined Administration

Centralized Access Control

Delegated/Self Administration

Directory Synchronization

Granular Access Control

Multi-Platform Support

Zero-Day Start

Design and Architecture
Where does everything go?

Novell Products/Solutions

Nsure®

eDirectory™ 8.7.3 (beta testing 8.8)

Identity Manager 2.0.1

iManager 2.0.2

eGuide 2.1.2

iChain® 2.3.3

ExteNd™

Running 5.2

Content Management

Communities (running exteNd 4.1)

All running on SUSE® LINUX Enterprise Server 8

SLES 9 in system test now

Design Solution - Portal

Internal

Firewall

Avaya LB333R

core switch

iChain 2.2

core switch

iChain 2.2

iChain 2.2

Avaya LB333R

Extend 5

eDir 8.7 Auth (Replica)

eDir 8.7 Ident (Replica)

Replicated

DB

DB Replica

DRP

Primary Access

eDir 8.7 ldent (Master)

Extend 5

Replica

eDir 8.7 Auth (Master)

Replica

iMgr / eGuide

Extend 5

External

Firewall

Internal

Firewall

10.1.1.x

Roadmap

SSO

Policy Management

Tool Sets

Help Desk

Inventory

DEN

Enterprise Printing

Citrix

AS400

NT 4.0 IMS Domain

Other NT Domains

W2K

Unix

3270 / 5250

WAP

Building Security

PBX

Profile Management

Portal

University of Nebraska

Other e-Mail

PKI

Shrink-Wrap Applications

JD Edwards

Custom Auth Based Apps Corporate

DB Auth. Based Apps

VPN

Lotus Notes

E-Guide

Enterprise

eDirectory

LDAP

Server

Custom Auth Based Apps LOB

MetaFrame

LDAP

DirXML®

LDAP

Proprietary

LDAP

Various

JDBC / Domino (DirXML)

JDBC (DirXML)

LDAP

LDAP

LDAP or JNDI

DirXML

DirXML

DirXML

DirXML

DirXML

DirXML

LDAP or JNDI

JDBC

LDAP / LDIF

LDAP or JNDI

LDCAP / NCP

LDIF / Batch

LDAP + JDBC (DirXML)

LDAP

Various

LDAP

LDAP (DirXML)

JDBC (DirXML)

Business Partners

Federal

Operating Systems and Application Possible Connection

to the Enterprise eDirectory

Roadmap - Timeline

Operating Systems and Application

Integration Roadmap

NT 4.0

IMS Domain

Shrink-Wrap Applications

University of Nebraska

Custom Authentication Based LOB Apps

Custom Authentication Based Apps

DB - Authentication Based Apps

PKI, SmartCard

Other Agencies

Enterprise File Services

Building Security

PBX

Other Email

Tool Sets

fy2003

fy2004

fy2006

fy2007

fy2008 and Beyond

Completed

Unfunded

Legend

Enterprise Printing

Guardian Apps

SSO

Lotus Notes

Unix

Basic Email

W2K

AS400

DirXML®

Citrix

Provisioning Portal

Inventory

Graded Authentication

Clarity

AD Provisioning

Wireless

e-Guide

RACF

NetWare

Portal

JD Edwards

3270/5250

Help Desk

VPN

DEN

Profile Management

Lotus Notes Apps

fy2005

Demo

Lessons Learned

Plan for everything, implement the minimum.

Learn the Business Rules First.

Sell early and often (Customer Buy in).

Get a stake in the ground as early as possible.

Keep your Schema lean and mean.

Get Content out to the users as quickly as possible.

Failover and DRP will take longer than you think.

KISS

Use NOVELL

McKay Brown

2002-04-25T14:40:43