Novell Nsure® Identity Manager 2 Competitive Overview

Deven Macdonald

NSiG Product Manager

Novell Secure iServices

Novell, Inc.

dmacdonald@novell.com

Justin J. Taylor

Chief Strategist, Digital Identity

Board Member, Liberty Alliance

Novell, Inc.

jutaylor@novell.com

Business goal = the agile enterprise

Your business

Employees

B2B

Partners

Customers

Finance

Marketing

Sales

Customer service

Identity Management
Overview

Identity = How user information is represented in all the IT systems throughout the organization…

Identity Management = Setting and acting on policies for identity information, regarding security, organization, granting of access, etc.

Why do we care about Identity Management?

Reduce administration and help desk costs

Improve security

Enhance end-users’ productivity and satisfaction

Ensure business policies are followed

Provide confidence to be able to do business

Islands of Isolated Data

HR

ERP

PBX

Directory

Mail

Operating
System

Database

Sharing data through an identity vault

HR

ERP

PBX

Directory

Mail

Operating
System

Database

Identity Manager

Managing the User Lifecycle

USER
LIFECYCLE

Relationship Begins

Promotion

Move

Locations

New Project

Forgot

Password

Relationship

Ends

Password

Expires

Provisioning

Routine User
Administration

Password
Management

De-provisioning

Identity Management
The need to understand competitive offerings

Growing Identity Management needs by organizations world-wide continue to stimulate growth in the Identity/Provisioning Management market.

On-going market growth = More Competition

What is the difference between these offerings?

What is the best solution for you?

Decision Criteria?

Decision Criteria
Considering an Identity Management Solution

Areas of Consideration

Automated Administration

Dynamic Rules Engine

Policy Based Resource Provisioning

Password Management

Work flow

Architecture

Performance

Platforms

Security

Rapid Development and Deployment

Initial Investment

Software and Service Costs

Hardware Costs

Services Costs

Financial, Market Organizational Viability

History

Connectivity

Platforms, Directories

Database

Applications

Product Vision

Services

Company

Professional Services

Support

Product Functionality

Technical Architecture

Cost and Viability

Vision and Service

Connectivity

Functionality

Administration

Present data in a single location from which administrators applications and users can access or manage the identity

Robust and flexible rules for definition of data like associations, mapping, and transformation policies

Real-time event based provisioning (linking various sources of data to comprise and identity and perform automated functions)

Dynamic Rules Engine

Defining policy (rules) to manage flow, ownership and structure of information from one or many systems into others (controlled automatic distribution of resources).

Manage data and resolve conflicts between data to reduce duplication, inconsistent, out-of-date or redundant data across multiple systems.

Policy Based Resource Provisioning

Provisioning of access based on a users role, entitlements, rights, prerequisites, etc.

Policy enforcement ensuring new policy and changes are pushed and tracked across all platforms.

Password Management and Workflow

Password strength, reset or change, self-service, bi-directional synchronization

Password policy enforcement

Routing, notification and approval (SMTP client or web service)

Delegation and escalation

Product Functionality

Automated Administration

Dynamic Rules Engine

Policy Based Provisioning

Password Management

Workflow

Connectivity

Connectivity

Ability to integrate with target applications

Real-time triggers

Non-intrusive

Secure communication and authentication

Extensive connectivity to meet all business needs

Platforms, Directories, and Databases

Provision user accounts, group’s and rights

Integration with the following:

Database

Directory

Mainframe

UNIX

Applications

Target business applications

Web Servers

Connectivity

Platforms, directories and database integration

Applications

Connectivity

Technical Architecture

Architecture

Infrastructure requisites for use (impact on existing architecture)

Performance

Scalability in the enterprise

Reliability and Usability

Logging, monitoring ability

Platforms

Flexibility and support of widespread platforms (Database, Server, Client and Directory support)

Security

Authentication, data integrity, password usage/encryption

Rapid Development and Deployment

Ease of implementation

Rich customization capabilities

Supporting resources (documentation, product availability, delivery)

Technical Architecture

Architecture

Performance

Platforms

Security

Rapid D&D

Cost and Viability

Initial Investment

Consideration of total initial acquisition costs (licensing, deployment, consulting, training, on-going support)

Software and Service Costs

Pricing availability (pre server and/or per seat)

Subscription, straight purchase, etc.

Hardware Costs

Percentage of existing architecture that can be leveraged

Future priorities and areas of focus

Financial, Market, and Organizational Viability

Vendor size, financial stability, existing customer base, market growth

Initial Investment

Software and Service Costs

Hardware Costs

Financial, Market and Organizational Viability

Cost and Viability

Vision and Service

Vision

Proven vision and product strategy

Long-term viability of an organization within the Identity Management market

Company

Company history

Long-term goals improving on existing strengths and competencies

Market exposure

Professional Services

Availability of technical resources, quality, technical depth

Demonstration of client satisfaction and long-term track record in market

Support

World-wide support infrastructure

Proven problem resolution, on-going support and maintenance throughout product lifecycle

Vision

Company

Professional Services

Support

Vision and Service

Competitors

Who are the key players?

Top Tier Vendors

These vendors:

Provide a comprehensive set of IdM products

Own a directory/ metadirectory platform

Provide related solutions

WW value delivery ability

Significant customer base

Acknowledged leaders by Analyst firms

Players

Novell: Technical superiority, long-term experience, seamless offering, xplat capabilities, .

IBM: Tight with CSIs. Marketing muscle. Big ticket.

SUN: Recently moved into this position after acquisition of WaveSet

Top Tier Contenders

Lack one or more key attributes of Top Tier, but could or will close the gap.

Players

Microsoft: Preparing to move to Top Tier with future release.

CA: Recently acquired Netegrity (Business Layers).

Oracle: Moving into IdM, but lacks metadirectory

HP: Only need an acquisition

Niche Vendors

Focus on one or two specific functions. Architectures tend to run out of gas when scaled or stressed. Seeking investment, partnering or acquisition by Top Tier.

Players

BMC

Courion

M-Tech

MaxWare

Critical Path

Thor

“The metadirectory service Magic Quadrant shows the metadirectory market is maturing quickly, with Novell leading the pack toward the future.”

Gartner Research Note

August 2002

“We continue to view [Novell] DirXML® as market leading technology”

Gartner Research Note

September 2003

Novell Leadership Recognition

Novell Leadership Recognition

Identity Management and User Provisioning Meta Evaluation Summary

“The product suite, Nsure Identity Manager (formerly DirXML), possesses the feature/function set to compete effectively with leaders IBM Tivoli and Sun. Its relatively new presence in the user provisioning market was the only factor that put it on the leader/challenger line rather than above it. Statistics on existing sales and customer wins indicate Novell will likely move into the leader category within one or two quarters if current momentum is maintained.”

METAspectrum, 5 Jan 2005

Identity Management―

User Provisioning

METAspectrumSM

Novell Leadership Recognition

LDAP Directories Meta Evaluation Summary

“Sun and Novell exhibit a combination of rich feature sets; production implementations of size, breadth, and scope; and presence in most major market segments. They also remain vendors of choice for systems integrators building identity infrastructure and identity management systems. Leadership in directories is also characterized by mature production implementations and complex, distributed directory networks with robust multi-vendor integration capabilities.”

METAspectrum, 20 Jan 2004

LDAP Directories

METAspectrumSM Evaluation

Things we do right…

Grew IDM from core competencies

Centralized points of administration and web-based management

Robust dynamic rules engine

Flexible policy definition and policy based resource provisioning

Provide a secure and consistent repository

Open architecture and proven scalability

Cross Platform

Comprehensive connectivity

Real-time, event based, non-intrusive

Password synchronization

Password Management

Audit and Logging

Rapid development and deployment

Richest set of identity management solutions

Experienced support and services

Things to watch out for…

Novell !

Functionality

Connectivity

Technical Architecture

Cost and Viability

Vision and Service

Novell

Things they did right…

Web-based access and management

A nice wrapper around acquired pieces

MetaMerge Admin Console/Graphical Development Environment and Access 360

Things to watch out for…

Questionable architectural synergies of IBM’s acquisitions

Significant effort required to create and manage policy configuration (role definitions)

Complex administration

Limited connectivity

Heavy reliance on standards and protocols for integration

Limited password synchronization

Password interceptor (Win 2000)

Prohibitive long-term costs for product and services

Require customers to trust their ability to deliver

Result of their strategy to out-spend and out-position competitors

IBM

Functionality

Connectivity

Technical Architecture

Cost and Viability

Vision and Service

Things they did right…

Good management interfaces

Relatively low cost ($25,000 for Enterprise Edition, $19,000 for MS SQL)

Things to watch out for…

Not cross-platform. Works only on Windows 2003 Server only

No Password Management (self-service or reset)

Requires MS Visual Studio for policy creation and configuration

Lacks reporting capabilities

Not integrated with Active Directory

Uses an intermediate data store (MS SQL)

Not real-time

Limited connectivity (generic/standards based). Do not plan to provide any sort of connectivity with an ERP.

Vision demonstrates Meta-directory focus only

Missing key host integration components

Concentrates solely on the meta aspects of Identity Management

Microsoft

Functionality

Connectivity

Technical Architecture

Cost and Viability

Vision and Service

Things they did right…

Strong use of LDAP, directory integration

Acquired niche “Cinderella” provisioning company

Things to watch out for…

Hasn’t seen development until recent years

Compilation of several offerings

Limited connectors, connector development is very difficult

Limited replication capabilities

Limited Auditing capabilities (only CLi tools for log analyzing)

Un-flexibile architecture

WaveSet’s rigid architecture is tactically oriented

Not able to scale as customer’s needs evolve

Historical weakness integration acquisitions

Weak supporting service programs

WaveSet had established strong CSI relationships, presently having issues rolling projects out

Consulting, technical support, developer support

Sun Microsystems

Functionality

Connectivity

Technical Architecture

Cost and Viability

Vision and Service

Things they did right…

Point solution for managing employees

Good management and configuration tools

Web-based management

Niche specific proficiencies (ie. password management, reporting and auditing)

Things to watch out for…

Not comprehensive offerings

Architectural concerns

Mis-matched components (often offer a multi-vendor solution)

Scalability limitations

Uni-directional, not real time

No central point of administration

Hindrance to deployment and management

Wearing acquisition targets

Niche Vendors
(BMC, CA, Critical Path, MaXware, Thor, Courion, etc.)

Functionality

Connectivity

Technical Architecture

Cost and Viability

Vision and Service

Cumulative Return On Investment

SSO / Reduced Sign-On

Password Synchronization

Role-based Access control

Aggregated Identity

Federated Identity

Identity Driven Enterprise

Desktop & Server management

Handheld management

Patch management

Siloed Systems

Application level Security

Multiple identity stores

Identity Services Foundation

Composite Applications / EAI

Provisioning/De-provisioning

Process Automation

Questions & Answers

Other Sessions of Interest

Other Sessions of Interest
Introductions, Case Studies, Dev Hands-on

INTRODUCTIONS, OVERVIEWS, AND FUTURES

IO 145 Building Intelligent Enterprises with Novell's Identity Driven Computing

IO 147 An Introduction to JBoss Application Server

IO 148 Directory Services Introduction and Overview

IO 149 Making the Business Case for Secure Identity Management

IO 150 Road-map for exteNd and Nsure Technologies

IO 151 Identity Manager 2 Competitive Comparisons

IO 152 Web Access Management - Novell iChain and Beyond

IO 154 Novell Nsure Identity Manager 2 Overview and Futures

IO 155 Nsure Audit: What's New and Beyond

IO 156 Novell Security Manager powered by Astaro: Introduction and Overview

IO 166 Architecture and Best Practices for Government Portals

IO 168 What's Missing from Your Dashboard Framework?

IO 169 Building a Secure Enterprise Dashboard Solution with Novell and Hyperion

IO 245 Making Service Oriented Architecture (SOA) A Reality In Today's Enterprise

IO 246 XForms and PageFlow: The Last Mile of a Service Oriented Architecture

IO 248 Implementing K-12 Education Data Integration Solutions Using Novell Identity Manager 2.0 and SIF

IO 266 Best Practices for Implementing Role-Based Identity Management

IO 267 The Pervasive Role of Identity in Addressing Government Challenges

IO 269 Developing a Financial and Operational Dashboard Strategy

Other Sessions of Interest
Introductions, Case Studies, Dev Hands-on

BUSINESS CASE STUDIES

BUS 145 Novell File System Factory Real World Implementations and best practices

BUS 146 State of Nebraska uses Identity-Driven Federation to Eliminate Boundaries for Citizens

BUS 147 Driven by Identity: The State of Nebraska Takes the Lead With Help from Novell

BUS 148 COCC Case Study: Novell exteNd on SUSE LINUX

BUS 149 Major Retailer to Streamline B2B Operations with Identity-Driven Provisioning

BUS 165 Integrating Government Data & Applications: Palm Beach County Case Study

BUS 245 Novell Nsure Audit - Secure Logging in an Enterprise Environment

BUS 246 How the University of Texas Health Science Center at Houston is Implementing Nsure Identity Manager 2.0.1

Other Sessions of Interest
Introductions, Case Studies, Dev Hands-on

DEVELOPER HANDS-ON

DHO 145 A Developer's Introduction to Novell exteNd

DHO 245 NVDS Developer Hands-On

DHO 246 Developing Custom Tasks for Novell iManager

DHO 345 Identity Manager Hands-On Developer Lab

DHO 346 Customizing the Novell exteNd Express Portal

TECHNICAL TUTORIALS

TUT 145 Configuring Novell eDirectory™ for 802.11 Wireless Authentication

TUT 146 Deploying Kerberos Authentication

TUT 147 Implementing Approval-based Workflow with the Enhanced Provisioning Module for Nsure Identity Manager

TUT 148 Must Know Tips and Tricks for Novell Nsure Identity Manager 2 Deployments

TUT 149 Configuring Identity Manager 2 for HTTP/SOAP

TUT 150 Techniques for Maintaining NDS® and eDirectory--An Administrators How-to Guide

TUT 245 Comprehensive Password Management: From Policy Definition to Deployment

TUT 246 Novell iManager Introduction and Configuration

TUT 247 Levering Identity Manager with exteNd

TUT 248 SecureLogin Advanced Scripting

TUT 249 Troubleshooting Novell eDirectory

TUT 250 Identity-Enabled Applications with Novell Virtual Directory Services

Other Sessions of Interest
Developer Lectures, Technical Tutorials

TECHNICAL TUTORIALS

TUT 251 Deploying Universal Password

TUT 252 Configuring Identity Manager 2 for GroupWise®

TUT 253 Advanced Configuration for Active Directory Using Identity Manager 2

TUT 254 Configuring Novell Identity Manager 2 for JDBC

TUT 255 Configuring Identity Manager 2 Driver 5.0 for PeopleSoft

TUT 256 Highly Available Novell Nsure Identity Manager

TUT 257 Nsure Identity Manager in a Linux World

TUT 258 Installing and Configuring the Novell Identity Manager Integration Modules for Mainframe (z/OS) and Midrange (OS/400)

TUT 259 Troubleshooting Identity Manager 2

TUT 261 Troubleshooting Tips and Tools for iChain 2.3

TUT 263 Using Lightweight Directory Access Protocol (LDAP) to Accomplish Everyday Administration Tasks

TUT 264 Password Synchronization Across Connected Systems with Nsure Identity Manager 2

TUT 265 IT Controls for Sarbanes-Oxley and Beyond

TUT 266 Meeting Next Generation Secure Access Requirements with Smart Cards and Digital Certificates

TUT 275 Delivering a Win/Win for Fast & Secure Healthcare Information Access

TUT 276 Understanding the Architecture of Identity Manager 2

TUT 278 Directory Services Futures

TUT 279 Configuring Novell iChain and Novell exteNd for Secure Portal Access

TUT 280 Deploying Novell eDirectory on Linux

TUT 281 Novell eDirectory Tips and Tricks

Other Sessions of Interest
Developer Lectures, Technical Tutorials

TECHNICAL TUTORIALS

TUT 283 Novell SecureLogin: Advanced Deployment Strategies In An Age Of Regulatory Compliance.

TUT 345 Nsure Audit Live

TUT 346 Novell BorderManager: Advanced Firewall Design and Troubleshooting

TUT 347 Novell iManager Advanced Configuration

TUT 348 Identity Driven Storage Management on NetWare®, Linux, and Windows: File System Factory Installation and Configuration

TUT 349 Design, Deploy, and Document Identity Manager solutions with the new Designer for Nsure Identity Manager

TUT 350 Implementing Identity Manager 2 Policies

TUT 351 Migrating from Novell Account Management (NAM) to Identity Manager 2 on UNIX, Windows and Mainframes

TUT 352 Identity Manager Driver for Lotus Notes Advanced Configuration

TUT 353 Novell Security Manager powered by Astaro: Creative VPN and Firewall Design

TUT 354 Configuring Enhance Provisioning Module

TUT 355 XPath and Policies Workshop

TUT 370 Architecting the Identity Services Foundation

In today’s dynamic business environment, enterprises have to be agile and adaptive to survive. Agility is the ability to respond to change appropriately, adapting business strategies in response to external drivers and executing those strategies effectively. The agile enterprise has positioned itself from a business process and technological perspective to:

Act quickly when customer demands and expectations shift—or perhaps even anticipate changing requirements and lead the way with new products and services.

Respond promptly yet judiciously to competitive actions such as the introduction of new products or price cuts.

Comply easily with new and evolving government mandates.

Weather economic downturns and ensure it is poised to take immediate advantage when the economy turns around.

Integrate business processes and operations smoothly across companies after a merger or acquisition.

Becoming agile is difficult given the complexity of current business environments:

Heterogeneous systems

People inside and outside the organization who need access to business resources

Information locked in silos

New business applications being added all the time

In this complex environment, the challenge is to deliver the right information to the right people—and only the right people.

The main challenge of identity management is how to manage a growing group of users that are constantly changing

New employees, partners, contractors, and customers come on board daily, and they need access to business resources immediately.

Users struggle with remembering multiple passwords

New projects require immediate and temporary access rights

Employees change location -> Access and Information changes

Current users’ responsibilities change, and so does their access privilege needs and profile information

Or, their relationship ends, and you need to quickly revoke their access completely

It is critical for organizations to be able to streamline user administration throughout the user lifecycle with the organization.

With Nsure Identity Manager, you can:

deliver first-day access to essential resources - provisioning

synchronize multiple passwords into a single login – password management

modify or revoke access rights and information instantly as the user’s role changes – routine user administration

Allow users to manage their own passwords and information

De-provision users when the relationship ends – de-provisioning

This presentation will focus on the four key identity management capabilities that address all aspects of user lifecycle management:

Provisioning

De-Provisioning

Routine User Administration

Deprovisioning

By 2005, 60 percent of the Global 2000 enterprises will

implement provisioning products in order to manage their user (internal and

external) access requirements for both web and non-web applications (0.8

probability).

By 2005, 60 percent of the Global 2000 enterprises will

implement provisioning products in order to manage their user (internal and

external) access requirements for both web and non-web applications (0.8

probability).

By 2005, 60 percent of the Global 2000 enterprises will

implement provisioning products in order to manage their user (internal and

external) access requirements for both web and non-web applications (0.8

probability).

Gartner predicts with 80% probability that by 2005, 60 percent of Global 2000 enterprises will have implemented provisioning products to manage their (internal and external) user access requirements (for both web and non-web applications)

Five fundamental market drivers are leading global 2000 enterprises, government, and educational entities to implement secure identity management solutions:

Extending the Enterprise: You must broaden your reach so you can grow your business, create new revenue streams, and enable productivity from anywhere. This entails extending business resources, systems, and services to customers, partners, and employees wherever they are.

Providing Security: The need to securely deliver your business resources, systems, and services. In essence, you need to open your doors to the world while ensuring that the whole world doesn’t walk through them. It is important to securely manage appropriate access to business resources for employees, customers, partners and suppliers.

Reducing Costs and Increasing Productivity: In short, doing business more efficiently. Within your IT organization, this includes looking at the drivers behind system administration and help desk costs. It also includes a tighter, correlated relationship between your employees and the business resources they need to work productively.

30% of help desk calls are password related

wasted productivity when users can’t access the right information

need to automate processes to streamline user identity management

Increasing Customer Loyalty through Higher Service Levels: Thorough and customized service leads to customer retention and increased customer loyalty, which in turn lead to higher revenues. To provide this level of service, you must eliminate identity silos, bring customer data together, and provide comprehensive information from which to make informed business decisions. Also, when you empower customers to manage their personal information, they will appreciate the convenience and resulting improved service.

Providing Regulatory Compliance: Nearly everyone–publicly traded corporations, hospitals, schools, government entities–is subject to multiple regulations that mandate different aspects of privacy or accountability (e.g., Sarbanes-Oxley, HIPAA, Graham-Leach-Bliley, EU Data Protection Directive, etc.). The common challenge is to ensure that the right people have appropriate access to the right resources at the right time–and to be able to prove it.

To meet these business challenges, you need to make sure that you and your systems know how to deliver the right resources to the right people. Identity is the common thread in these challenges.

IdM vendors must morph into one of two categories or die:

Self-providing or solidly contributing to a comprehensive IdM suite

Uniquely addressing a vertical or niche market’s IdM needs

Quickly achieve Best-of-breadth (not necessarily Best-of-breed)—to provide a full-service customer solution (the comprehensive suite)

Full complement of IdM features, well-integrated but modular enough to be flexible in packaging

Hi-quality connectivity to a handful of core systems, “good enough” connectivity to many others

Interesting, meaningful connections to the related solution areas

Be friendly (business and architecture) to a wide variety of possible partners

Modular design to accommodate integration with various partner solutions

Maintaining low cost structure and flexible licensing on at least the ‘core’ product items

Developing business/relational competence in dealing with OEM partnerships

Positives (to Sun)

Gives Waveset a much larger salesforce/channel

Waveset viability - In past customer deals we could talk to Waveset’s lack of viability - we no longer have this silver bullet

CSI relationships – Waveset brings very strong CSI relationships (D&T and PWC)

Mindshare – Waveset is considered by many as the “Cinderella” of the Identity Management /Provisioning industry including analysts, press, partners

This slide will talk about the evolution of IT strategies and how Novell’s Linux strategy and one Net vision enables organization to manage the evolution of IT business and the trend to turn enterprise focused IT operations into a services model.

Reduce costs

Improve operational excellence

Increase revenue & market share

Increase value of infrastructure investment

Satisfy end-user customers & stakeholders

IO 151 Identity Manager 2 Competitive Comparisons

2003-12-08T12:43:39