Managing employee relations is increasingly demanding with ongoing changes to policy and the volatile marketplace. Human Resource directors are pulled in so many different directions and are still expected to get new employees up-and-running quickly. And in the case of termination, directors must ensure the company’s assets are safe and secure. Whether you’ve thought about it or not, technology can solve many HR challenges. View the slide deck, presented at November's Southeast Michigan SHRM chapter meeting, and find out more about identity management solutions and why we think HR & IT is a marriage made in heaven. For more information on this or other topics, visit www.cdh.com.

1. Human Resources & Info Tech:
A Marriage Made in Heaven?
November 2010

2. C/D/H Quick Facts
About Us Approach Partnerships
• 20th Year • Vendor Neutral • Microsoft Gold
• Grand Rapids & • Non-reseller • VMware Enterprise
Royal Oak • Professional • Cisco Premier
• 25 Full Time Staff, Services Only • Citrix Partner
40 Total Staff • Novell Platinum

3. Expertise
Project Management Infrastructure P
I
C
A
Collaboration Access & Identity Management

4. Agenda
• Why identity management?
• What is identity management?
• Overview of identity
management system/solutions
• Typical implementation approach
• Case Studies
• Q & A session

5. Why Identity Management?
• Faster startup and shortened time to
productivity for new personnel
• Reduced man-hours required for
personnel updates
• Passwords synchronized across all
connected systems
• Get IT out of the business of managing
users, roles, and permissions. Delegated
to business-line managers

6. Why Identity Management?
• Offboarding completed quickly, confidentially,
and completely
• Quickly disable/delete access across all
systems
• Changes to employee accounts are tracked,
auditable, and reportable
• IT finally getting my information correct
everywhere (name change, role change,
location change)
• HR system becomes accepted “Authoritative
Source” across the enterprise

7. What is an IDM System?
A system – processes, rules,
applications, and services - that
coordinates identity information
held in disparate and scattered
data sources.

8. Which Means……
• IDM is primarily software implemented by IT
that connects your HR software to all the
other applications that hold user
identifications.
• Identity systems synchronize information
between the dozens of systems in your
company that know nothing about each other.
• Identity systems use a central “hub” or vault
to store and synchronize identities.

9. Systems Where Identity is Stored and
Where Identity Systems Connect
 JD Edwards  PeopleSoft  SAP  ADP Payroll
 Active  Lawson  Informix  Oracle
Directory  ZENworks  Dynamics Financials
 NT Domains  Secure Login  AIX  Netegrity
 Outlook  RACF
 Chronos  Red Hat
 Exchange  ACF/2
 iPlanet  SuSE
 GroupWise
 Secureway  Solaris  HP UX
 Notes
 Critical Path  Debian  Tibco
 LDAP
 DirX  x.500  WebLogic
 Text
 JDBC  Oracle  Banner  JD Edwards
 DB2  Sybase  Oracle HR  In-Join
 Websphere  MySQL  Cisco VoIP  Policy Director
MQ  Excel  RSA ACE  RADIUS

10. Authoritative Sources
• HR system may be authoritative for the users
themselves, but not for all parts of a user
• Email systems are authoritative for email
address, feedback into HR and other systems
• Phone system authoritative for phone
extensions
• Peoplesoft system may be authoritative for
cost centers.

11. The identity vault is the hub of
information

12. Identity System
Identity System

13. What is an Identity Vault?
Logon Name
E-mail alias
Cost Center
Manager
Employee #
Identity Vault

14. Providing Consistent Identity Information
Dan Clay
Common Name
Identity Vault
Dan Clay

15. Employee
Onboarding
NOS
Directory

16. Managing Changes to
Title = Director
Identity Information
Title = Director
Title = Director
Metadirectory
Title = Director

17. Employee Offboarding
NOS
Directory

18. IDM Project Success Criteria
• Secure executive-level sponsor & a strong
project manager
• Identify benefits, risks, scope, technical
requirements, talent needed, etc.
• Define business rules (authoritative sources,
precedence, other)
• Plan for data clean up and/or bulk load
strategies
• Configure, test, pilot, and deploy identity
system

19. Common Project Mistakes
• IT goes around HR and doesn’t start with the
authoritative source
• Attempting to do a bottom-up implementation (IT
driven, not executive sponsored)
• Hiring and firing process not well documented
prior to starting
• Not having IDM experienced & professional
project management
• Trying to synchronize too many applications in the
first phase
• Not synchronizing enough – not driven by good
sound business drivers

20. Identity Management Vendors
• Computer Associates
• IBM
• Microsoft
• Novell
• Oracle/Sun

21. Vendor Comparison

22. Regional Hospital
• 2,500 Employees
• Identity Vault
Concept
• Synchronized
Passwords
• Supports future
application
integration

23. National HealthCare Provider
• 36,000 Identities
• Active Directory
Consolidation
• NetWare Only As
the Vault
• Over 42 Applications
Integrated into Vault

24. Global Insurance Co.
• 2,000 Identities
• Vault to Vault
Connectors
• Complete Test
Environment
• Drivers to Support over
18 applications

25. Local Regional University
• 4,000 Faculty, 16,000
Students, 67,000 alumni
• Foundation for
connecting all new
systems
• Support of Student and
Faculty Portals (alumni
under development)
• Password self-services
implemented

26. Thank You
Royal Oak Grand Rapids
306 S. Washington Ave. 15 Ionia SW
Suite 212 Suite 270
Royal Oak, MI 48067 Grand Rapids, MI 49503
p: (248) 546-1800 p: (616) 776-1600
www.cdh.com
(c) C/D/H 2007. All rights reserved