introduction to identity-as-a-service and secure access to saas

World®’16

IntroductiontoIdentity-as-a-ServiceandSecureAccesstoSaaSPaulPeterson- AdvisorProductManagement- CATechnologies

SCX06S

SECURITY

2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation


Abstract

Theriseincloudandmobileappsisimpactingorganizationsofallsizes,changinghowemployeesworkandhowITdepartmentsareexpectedtosupportthebusiness.Today,businessuserscanleveragerichcapabilitiesinthecloudtoenablebettercollaboration,speedandproductivitythaneverbefore.Theaccessibility,easeofuseandadvancesincloudandmobileappsintroducedimmensepressureonITtodelivermodernapplicationsfaster,whilecreatinganexceptionaluserexperience.IfITfailstoaccommodatetheneedsofusersfastenough,theysimplyusetheappstheyneed,oftenwithouttheknowledgeoftheITdepartment.Inthissession,you’lllearnhowtoleverageidentity-as-a-servicetobalancesecurity,agilityanduserexperiencewhilestayingaheadofshadowIT.

PaulPetersonCATechnologiesAdvisor,ProductManagement


Agenda

THENEWDIGITALWORKPLACE

CHALLENGES

NEXTGENERATIONIDENTITY-AS-A-SERVICE

DEMO

1

2

3

4


ExplosionofSaaS Speed ShadowIT

Newgenerationpowerusers

LOBappownership

Applicationchurn

Today’sDigitalWorkplace


EmbracingtheDigitalWorkplace

1. LeverageshadowITasanopportunitytoempowerLOB

2. Gaincontrolandvisibilityoveryourcloudenvironment

3. Deliveraconsumergradeworkforceexperience

4. Acceleratedigitaltransformationandcloudadoption

5. Bridgebetweennewandlegacyenvironments

6. Automateidentitylifecycleandaccessmanagementprocesses

HowtoEvolveQuicklyandAvoidGettingDisrupted


Challenges

Manyapplicationseverywhere

Manyidentitieseverywhere

Multipleaccessmethods

Constantchange ManycredentialsNovisibilityorcontrol


FindingtheRightBalance

Security Agility UserExperience


IntroducingCAIdentityServiceNextGenerationIdentity-as-a-ServicefortheModernHybridEnterprise

Acceleratedigitaltransformationwhiledeliveringasecureconsumergradeworkforceexperience

UserProvisioning SingleSign-On IdentityLifecycleManagement


SaaS-FirstandHybridDeploymentModelsLeverageExistingOn-PremisesIAMInvestments

SingleSign-on

Authentication(SaaS-firstmodel)

CAIdentityService

Userprovisioninganddeprovisioning

SingleSign-on

Rogueandorphanaccountdetectionandremediation

CASingleSign-On

On-premisesapps

SaaS AppsActivedirectory

Peoplesource(optional)

SingleSign-on


UserProvisioningDeepandBi-DirectionalProvisioningIntegrations

AutomatetheprovisioninganddeprovisioningofuseraccountsinyourSaaS appswithbusinessfriendly rules

Godeepertomanagetheentitlements(groups,roles,permissions)ofyourusers

Getvisibility intoexistingaccountsandentitlements

Detectandremediateorphanandrogueaccounts

Leveragepredefinedintegrationsthatunderstandthespecificrequirements ofthetargetapplication


SingleSign-OnUnifiedLaunchpadLeveragesOn-premisesInvestments

Richout-of-the-boxintegrations and acustomSAML connectorenable SSOtohundredsofapplicationsinminutes

Authenticateusersusingastrongpasswordsupplementedbytwo-factorauthentication

Reducehelpdeskoverheadwithself-servicepasswordmanagementand forgottenpasswordrecovery

GiveyouruserstheeaseandconvenienceofsecureSingleSign-OntoSaaS andon-premisesappswiththeUnified Launchpadand CASSOintegration


IdentityLifecycleManagementRule-BasedProvisioningandAccessManagement

Automatedrule-basedprovisioninganddeprovisioning ofaccountswithentitlements

Abilitytodesignate anapplicationastheauthoritativepeoplesource

Self-service andadministrativeprofilemanagement

Administrativeauthorizationmodelenablesdelegationofappownership


KeyBenefits

Reducecloudattacksurfacewithdynamicprovisioningandbidirectionalintegrationsminimizingtheriskofover-privilegedandorphanaccounts

ImproveworkforceproductivitywithadynamicapplicationLaunchpadandseamlesssinglesign-onacrosshybridenvironments

Improvebusinessagilityandtimetovaluewithfastandsecurerolloutofcloudapplicationsandrapidintegrationwithon-premisesinvestments3

Security

Agility

UserExperience


KeyBenefits

Bidirectionalintegrations simplifyaccountdiscoveryandreconciliation,andenableorphanaccountdetectionandremediation

Asuperioruserexperiencemakesdelegationofappownershiptobusinessuserspossible,empoweringappownerstoonboardandsecureaccesstoappsinminutes

DynamicintegrationwithCASSOenablesagilityandrapidtimetovalueinenablingaconsumergradeworkforceexperience

3

Security

Agility

UserExperience


Administrator• Accountreconciliation• SAMLApplications• CASSOintegration

EndUser• Launchpad• MultifactorAuthentication

AppOwner• Applicationonboarding• Rules

Demo


RecommendedSessions

SESSION# TITLE DATE/TIME

SCX07S EnablingaHybridEnterpriseApplicationLaunchPad 11/16/2016at04:30PM

SCT42TTechTalk:A"GameofThrones"introductiontoidentity-as-a-service

11/17/2016at11:30AM

SCT08T TechTalk:FederatetoanSAML-EnabledAppinMinutes 11/17/2016at12:45PM

SCT43TTechTalk:Makelifeeasyforyouruserswithahybridapplicationlaunchpad

11/17/2016at3:45PM


Don’tMissOurINTERACTIVESecurityDemoExperience!

SNEAKPEEK!



Questions?


WeWanttoHearFromYou!

§ ITCentralisaleadingtechnologyreviewsite.CAhasthemtohelpgenerateproductreviewsforourSecurityproducts.

§ ITCSstaffmaybeatthissessionnow!(lookfortheirshirts).Ifyouwouldliketoofferaproductreview,pleaseaskthemaftertheclass,orgobytheirbooth.

Note:– Onlytakes5-7mins– Youhavetotalcontroloverthereview– Itcanbeanonymous,ifrequired


Thankyou.

Stayconnectedatcommunities.ca.com


Security

FormoreinformationonSecurity,pleasevisit:http://cainc.to/EtfYyw

introduction to identity-as-a-service and secure access to saas

Technology