With the spread of IT services, some of the key challenges facing business today are how to manage user identities and accounts, and how to enforce the confidentiality, integrity and availability of information, in a way that doesn't slow the business down.

Some of the identity and access challenges are:

•  Help desk overload and escalating administration costs in dealing with calls from users to reset passwords, add new account privileges etc.
•  Poorly defined and executed user lifecycle management that leads to ghost accounts for people who have left, and users gaining inappropriate privileges.
•  Requirements from auditors to report on user accounts to demonstrate compliance to regulations such as Sarbanes-Oxley and EuroSOX.
•  Re-inventing the wheel for identity management e.g. creating a new account database for a new business service. This adds to the complexity of the infrastructure and user lifecycle process, making the business less agile.
•  Few controls on sysadmin/root access to critical business servers which leads to mistakes and opportunities for malicious damage, and prevents effective auditing of who carried out changes.
•  Increased cost of authentication across multiple business systems, and increased security risks from a lack of an integrated and centralised policy for systems access.  

To deal with these challenges, Devoteam supplies complete solutions for Identity and Access Management using the following products:

CA Identity Manager

Provides automated identity management services for the creation, modification and eventual deletion of accounts and entitlements based on user relationships. It manages access and entitlements on a whole range of enterprise systems-from mainframes to Web applications.

CA Access Control

A product that centralises control and distributed enforcement of appropriate role-based access to sensitive server resources.

CA SiteMinder Web Access Manager

A centralized Web access management system that enables user authentication and single sign-on, policy-based authorization, identity federation, and auditing of access to Web applications and portals.