Diana Schlegel, Caterpillar, Inc. Case study of how Caterpillar is implementing OAuth corporate-wide and x509 certificates as an additional authentication mechanism for employee-owned assets, incorporating additional authentication schemas into existing technologies, serving mobile devices, and ensuring that the right individuals have the right access.

1. Caterpillar Non-Confidential
Change Management
Cloud Identity Summit
July 21, 2014
Diane Schlegel
Global IT Analyst, Caterpillar

2. Caterpillar Non-Confidential
Caterpillar

3. Caterpillar Non-Confidential
Change Management
• What is it, and why should you care about it?

4. Caterpillar Non-Confidential
Changes to be managed . . .
• In the last 1.5 years . . .
– +175% increase in the number of SSO connections
– New software version + 1 upgrade
– OAuth
– Mobile devices
• Balance Security and Access (X509 certificate implementation)
– Windows Authentication
– Corporate-wide Security Initiatives

5. Caterpillar Non-Confidential
THE PLATE IS FULL!
Security and
Corporate
Initiatives
New Devices
New VendorsNew Products
New Business
Cases

6. Caterpillar Non-Confidential
Individual SSO Requests Corporate-Wide SSO
Determine Requirements Early
Maintain Scheduled Change Windows
Apply Standards
Communicate!
Understand the “Big Picture”
Communicate!

7. Caterpillar Non-Confidential
Individual SSO Requests Corporate-Wide SSO
Determine Requirements Early
Maintain Scheduled Change Windows
Apply Standards
Communicate!
Understand the “Big Picture”
Communicate!

8. Caterpillar Non-Confidential
Thank you!