a·gen·tic a·gil·i·ty

Identity crisis

Explores using Microsoft Identity Lifecycle Manager 2007 to unify and automate employee identity data across multiple systems, improving consistency, security, and efficiency.

Published on
3 minute read
Image
https://nkdagility.com/resources/mY6h9tz2JRJ
Subscribe

I am having a look at Microsoft’s Identity Lifecycle Manager 2007 as a solution to our disparate user identity problem. Some of the bigger companies out there have solved this problem, and in many of the smaller companies it just does not exist, but we have many system that hold meta data about our employees. From HR systems to Active Directory and custom web based address books. Because of Aggreko’s unprecedented growth these systems have outgrown our capacity to maintain the consistency of the data, with small groups responsible for each repository and everyone not knowing where ALL the repository’s are or who controls them.

The idea of ILM server is to provide a single “metaverse” where all of the data is stored that has agents and adapters for all of the systems that you have. These agents and adapters are responsible for pulling and pushing the data between the stores in a consistent manor, so if HR in France updates a users job title it gets pulled into the “metaverse” and then pushed out to all of other system connected to ILM .

How Identity Lifecycle Manager 2007 Works

Identity crisis

Out of the box ILM 2007 supports the following agents and connectors:

Network Operating Systems and Directory Services

Microsoft Active Directory Windows Server 2003 R2, 2003, and 2000
Microsoft Active Directory Application Mode Windows Server 2003 R2 and 2003
Microsoft Windows NT 4.0
IBM Tivoli Directory Server
Novell eDirectory 8.6.2, 8.7, and 8.7.x
Sun Directory Server (Netscape/iPlanet/SunONE) 4.x and 5.x

Mainframe

IBM Resource Access Control Facility
Computer Associates eTrust ACF2
Computer Associates eTrust Top Secret

Email and Messaging

Microsoft Exchange 2007, 2003, 2000, and 5.5
Lotus Notes 6.x, 5.0, and 4.6

Applications

SAP 5.0 and 4.7
Telephone switches
XML-based systems
DSML-based systems

Databases

Microsoft SQL Server 2005, 2000, and 7
IBM DB2
Oracle 10g, 9i, and 8i

File-Based

Attribute value Pairs
CSV
Delimited
Fixed Width
Directory Services Markup Language (DSML) 2.0
LDAP Interchange Format (LDIF)

All Other

Extensible Management Agent for connectivity to all other systems

But ILM supports way more than just data consistency. It will even provision Active Directory accounts and mail accounts automatically if an employee is added by HR enabling this process to be automated. You could have HR create a user in their system and set the relevant “profile” that the relates to the user and have their AD and mail setup along with permissions for SharePoint sites, folder shares and any other custom system you care to name Identity crisis I like this system already… even if it only does half of what it says on the box it could be a very effective tool in the arsenal of any companies automation strategies.

A good point to note is wither the Data protection Act covers information about a person stored by the company they work for! I am not sure wither the same rules apply, but it is of benefit to any company if users details are accurate across all of their systems.

The benefits according to Microsoft’s

propaganda marketing:

We will see! I am currently installing a dev box and I will evaluate it according to the specific needs of our business…

Technorati Tags: Misc

Subscribe

Related Blog

No related videos found.

Connect with Martin Hinshelwood

If you've made it this far, it's worth connecting with our principal consultant and coach, Martin Hinshelwood, for a 30-minute 'ask me anything' call.

Our Happy Clients​

We partner with businesses across diverse industries, including finance, insurance, healthcare, pharmaceuticals, technology, engineering, transportation, hospitality, entertainment, legal, government, and military sectors.​

Flowmaster (a Mentor Graphics Company) Logo

Flowmaster (a Mentor Graphics Company)

Hubtel Ghana Logo

Hubtel Ghana

Workday Logo

Workday

Philips Logo

Philips

Higher Education Statistics Agency Logo

Higher Education Statistics Agency

Akaditi Logo

Akaditi

ProgramUtvikling Logo

ProgramUtvikling

MacDonald Humfrey (Automation) Ltd. Logo

MacDonald Humfrey (Automation) Ltd.

Brandes Investment Partners L.P. Logo

Brandes Investment Partners L.P.

Graham & Brown Logo

Graham & Brown

Xceptor - Process and Data Automation Logo

Xceptor - Process and Data Automation

Milliman Logo

Milliman

Qualco Logo

Qualco

Lean SA Logo

Lean SA

Genus Breeding Ltd Logo

Genus Breeding Ltd

YearUp.org Logo

YearUp.org

Boeing Logo

Boeing

Big Data for Humans Logo

Big Data for Humans

Nottingham County Council Logo

Nottingham County Council

Washington Department of Enterprise Services Logo

Washington Department of Enterprise Services

Royal Air Force Logo

Royal Air Force

Washington Department of Transport Logo

Washington Department of Transport

Department of Work and Pensions (UK) Logo

Department of Work and Pensions (UK)

Ghana Police Service Logo

Ghana Police Service

Slicedbread Logo

Slicedbread

Boeing Logo

Boeing

Graham & Brown Logo

Graham & Brown

Bistech Logo

Bistech

Sage Logo

Sage

YearUp.org Logo

YearUp.org