© 2006 IBM Corporation

Tivoli Identity Manager Express Tivoli Access Manager for Enterprise Single Sign-On(Product Demonstrations)

Tivoli Live! – 15 June 2006

Srdjan Ljubisavljevic (srdjan@uk.ibm.com)

David H Wood (davidh_wood@uk.ibm.com)

IBM IT Service Management

© 2006 IBM Corporation2

Tivoli Security Portfolio

Identity Manager

Identity Manager Express

Federated Identity Manager

Access Manager for eBusiness

Access Manager for OS

Access Manager for BI

Access Manager for ESSO

Directory Server

Directory Integrator

Security Compliance Manager

NeuSecure

DataPower

IBM Tivoli

IBM IT Service Management

© 2006 IBM Corporation3

What’s Hot in Tivoli Security in 2006?

IBM Tivoli Identity Manager Express

IBM Tivoli Access Manager for ESSO

IBM IT Service Management

© 2006 IBM Corporation4

Description: –ITIM Express is a simple, secure identity management solution that helps companies

manage passwords, user accounts, and access permissions. It provides a single point to manage user identities, manage approvals for accounts and ensures services are available to those who are authorized. Delegated self-care administration provides rapid time-to-value and enables companies to quickly respond to change.

Key Customer Benefits:– Easy to install, deploy and manage thereby generating a rapid ROI

– Centralized approvals and documentation of access approvals to facilitate compliance

– Reduce administrative costs and increase business process efficiencies

Who:–Mid-market companies (< 5000 users) and department’s within larger enterprises

IBM Tivoli Identity Manager Express 4.6

IBM IT Service Management

© 2006 IBM Corporation5

ITIM Express 4.6 – Key Features

Request-based provisioning with approval workflow User self-care and password management Intuitive GUI Recertification of user access rights Installed/Bundled adapters Out-of-the-box reporting Email notification HR Feeds Manual Service Account reconciliation

© 2006 IBM Corporation

TIM Express Demo

IBM IT Service Management

© 2006 IBM Corporation7

Sign-On Terminology

Single Sign-On Common Sign-On Reduced Sign-On Password Synchronization

IBM IT Service Management

© 2006 IBM Corporation8

X

IBM IT Service Management

© 2006 IBM Corporation9

IBM Tivoli Access Manager for Enterprise Single Sign-On

IBM Tivoli Access Manager for ESSO - our enterprise single sign-on solution and serves as the base for the components below

Additional ESSO Components

– Desktop Password Reset Adapter - component that allows users to reset their Windows password from a locked workstation

– Authentication Adapter - component that allows flexible authentication for the base ESSO product using tokens, smart cards, biometrics and passwords

– Provisioning Adapter - module that allows provisioning systems to directly distribute user credentials (usernames and passwords) to TAM for ESSO

– Kiosk Adapter - component that terminates inactive sessions and applications in Kiosks and shared workstations; essential for hospitals and similar environments

IBM IT Service Management

© 2006 IBM Corporation10

The Tivoli Enterprise Single Sign-on Suite

TAM for ESSODesktop PW

Reset Adapter

TAM for ESSOConsole

TAM for ESSOProvisioning

Adapter

TivoliIdentity

Manager

TAM for ESSOAuthentication

Adapter

TAM for ESSOCore

TAM for ESSOKiosk

Adapter

Directory/DB

13289576

SECURID

Password

PKI

Biometrics

Token/smart card

User AuthUser Auth User’s DesktopUser’s Desktop

TAMeb

Application Sign-OnApplication Sign-On

Windows

Web sites

Mainframes

Sign

On

Sign

Off

User

© 2006 IBM Corporation

TAM ESSO Demo

IBM IT Service Management

© 2006 IBM Corporation12

Taking Our Own Medicine

IBM Tivoli Directory Server – Blue Pages (> 300K entries)

IBM Tivoli Security Compliance Manager IBM Tivoli Access Manager for eBusiness – access to

w3.ibm.com portal IBM Tivoli Access Manager for ESSO – on TAP Etc.

IBM IT Service Management

© 2006 IBM Corporation13

IBM IT Service Management

© 2006 IBM Corporation14