Managing identities and entitlements. Hitachi ID Identity Manager streamlines and secures the management of users and entitlements. It strengthens internal controls with automated access deactivation, Role Based Access Control (RBAC), Segregation of Duties (SoD) policy enforcement and access certification. It reduces IT cost and improves user service with automated, delegated and self-service user management. http://hitachi-id.com/identity-manager/

1. ©2013HitachiIDSystems,Inc.Allrightsreserved.
Allothermarks,symbolsandtrademarksarethepropertyoftheirrespectiveowners.
HitachiIDIdentityManager
Consistentuserinformationacrossallsystems
IdentityManagercancopychangestouserinformationfromonesystemtoanother,onapriority
basis,automatically.
IdentitySynchronization
Visibilityandaccountability
IdentityManagerincludesarichsetofbuilt-inreportsforanalyzingentitlementsandchangehistory
byuser,application,roleorpolicy.
Reports
Eliminatemanualusersetupanddeactivation
IdentityManagercandetectchangesinasystemofrecord(suchasHR)andupdateaccessrights
bycreatingaccountsfornewusersanddeactivatingaccessfordepartedusers.
Automation
Empoweruserstomanageidentitiesandentitlements
Asimplewebportalenablesuserstoupdatetheircontactinformationandrequestaccessto
applicationsornetworkresources.
Managersandapplication/dataownerscanrequestchangestosecurityentitlements.Requestsmay
betoadd/removeapplicationaccess,changeroles,assign/revokegroupsorscheduledeactivation.
RequestPortal
Reviewandcleanupsecurityentitlements
Periodicallyinvitebusinessstake-holderstoreviewtheusersandsecurityentitlementswithintheir
scopeofauthority.Eachiseithercertifiedorflaggedforremovalafterfurtherapproval.
AccessCertification
Ensurethatchangerequestsareapprovedbeforetheyarecompleted
AuthorizationWorkflow
AllchangerequestsprocessedbyIdentityManagermaybesubjecttoapprovalbyoneormore
stake-holdersbeforebeingcompleted.
hitachi-id.com
Applicationaccesscontrolsareonlyasgoodas
theprocessesusedtoassignsecurity
entitlementstousers.Orphanaccounts,dormant
accountsandstaleprivilegesareevidenceof
processproblems.
InternalControls
Itcanbedifficulttoanswersimplequestionslike,
“whohasaccesstothisapplication”or“who
approvedthisentitlementandwhen?”
Audit/Compliance
Managinguseraccesstohundredsof
applicationsisexpensive.Changemanagement
isacostlybottleneckatoddswithfrequent
reorganizations,anincreasinglyopenperimeter
andevergrowingapplicationinventory.
ITCostandDelay
LostProductivity
Employeesandcontractorswastevaluabletime
waitingforneededaccess.
Challenges
HitachiIDIdentityManagerautomatesthefull
lifecycleofusersandentitlements,from
onboardingtodeactivation.Ithasalowertotal
costofownership(TCO)thancompetingproducts
becauseconnectors,forms,workflows,
auto-discoveryandreportsareallbuiltin.
ReturnonInvestment
HitachiIDIdentityManagerstreamlinesandsecuresthemanagementofusers
andentitlements.Itstrengthensinternalcontrolswithautomatedaccess
deactivation,RoleBasedAccessControl(RBAC),SegregationofDuties(SoD)
policyenforcementandaccesscertification.ItreducesITcostandimproves
userservicewithautomated,delegatedandself-serviceusermanagement.
Managingidentitiesandentitlements.

2. ©2013HitachiIDSystems,Inc.Allrightsreserved.
Allothermarks,symbolsandtrademarksarethepropertyoftheirrespectiveowners.
HitachiIDIdentityManager
Readthisbrochureonline:
2
WebExConnect,GoogleApps,Salesforce.com,UltiProHR,Office
365,Cybershift
Cloud/SaaS
NetworkdevicesandVPNsviaAD,LDAP,SSH
Networking
Exchange2000-2010,NotesNABandIDfiles,GroupWise
Groupware
OracleeBiz,PeopleSoft,SAPR/3,JDEandmore
Application
z/OSwithRACF,TopSecretorACF/2;iSeries;ScriptsforVM/ESA,
Unisys,Siemens,OpenVMS,Tandem
Mainframes/Mini
Linux,Solaris,AIX,HP-UXwithpasswd,shadow,TCB,Kerberos,
NISorNIS+
Unix
Oracle,Sybase,SQLServer,DB2/UDB
Database
Windows,NetWare,Samba,NASappliances
File/Print
Windows/ActiveDirectory,LDAP,eDirectory,NDS
Directory
IncludedConnectors
IncidentManagementIntegrations
Automaticallycreate,updateandcloseticketson:
•AxiosAssyst •BMC/RemedyARS
•BMCSDE •CAUnicenter
•ClarifyeFrontOffice •FrontRangeHEAT
•HPServiceManager •NumaraTrack-IT!
•Symantec/Altiris •TivoliServiceDesk
•ServiceNow•ServiceNow
Additionalintegrationsviae-mail,ODBC,webservicesand
webformsareavailable.
HitachiIDIdentityManagerispartoftheHitachiID
ManagementSuite,whichalsoincludes:PasswordManager
forself-servicemanagementofauthenticationfactorsand
PrivilegedAccessManagertosecureadministratorand
serviceaccounts.
Formoreinformation,pleasevisit:http://hitachi-id.com/
orcall:1.403.233.0740|1.877.386.0372orcall:1.403.233.0740|1.877.386.0372
Enforceapolicyofleastprivilege
IdentityManagerensuresthatusershaveappropriatesecurityentitlements.
•Rolebasedaccesscontrol(RBAC).
•Segregationofduties(SoD)policies,bothdetectiveandpreventive.
•Standarduserconfigurationusingtemplateaccounts.
•Controlsoverwhocanmakerequestsonbehalfofanygivenuser.
•Periodicaccesscertificationandcleanupofstaleentitlements.
SecurityPolicyEnforcement
Investinautomationwhereitmakessense
IdentityManagerincludesover100connectorsthatcanautomaticallyprovision,updateand
deactivateaccessoncommonsystemsandapplications.
Integrationswithverticalmarketorcustomapplicationscanbemadeviaflexibleagentsorabuilt-in
workflowthatinvitessystemadministratorstocompleterequestsmanually.
AutomatedConnectorsandHumanImplementers
One-stopshoppingforallchangerequests
Built-ininventorytrackingandimplementerworkflowsallowIdentityManagertoprovisionphysical
assetssuchasbuildingaccessbadges,laptopsandphones.
LogicalAccessandPhysicalAssets
Intercept“AccessDenied”errors
Whenuserstrytoopenshares,foldersorSharePointlibrarieswheretheydonothaveaccess,
IdentityManagerprovidesaneasylinktoawebpagewheretheycanrequestappropriatesecurity
entitlements.
WindowsandSharepointIntegration