<Insert Picture Here> Mehr Sicherheit durch Enterprise SSO wie funktioniert das genau?

Transkript

1

2 <Insert Picture Here> Mehr Sicherheit durch Enterprise SSO wie funktioniert das genau? Oliver Günther Senior Sales Consultant

3 Agenda Oracle IDM Überblick (5 Min.) Enterprise SSO Suite (10 Min.) Architektur Komponenten Oracle Enterprise SSO Demo (25 Min.) Fragen & Antworten (5 Min.) <Insert Picture Here>

4 Was klebt an diesem Monitor? a) Passworte zu Finanzanwendungen b) Nachrichten c) To-do s

5 Oracle Identity Management Überblick <Insert Picture Here>

6

7 Oracle s Identity Management Suite Access Management Access Manager Adaptive Access Manager Enterprise Single Sign-On Identity Federation Web Services Manager Authentication Service for OS Platform Security Platform Security For Java Fusion Applications Security Identity Administration Identity Manager Role Manager Directory Services Internet Directory Virtual Directory Audit & Compliance Identity Management Suite Suite Management Enterprise Manager IdM Pack

8 Oracle s Comprehensive IdM Solutions Access Management Strong Authentication Risk Based Authorization Single Sign-On Federation Web Services security Operating systems security Directory Services Storage Synchronization Virtualization Platform Security Application server security Fusion Applications security Identity Administration Identity life cycle management Role management & mining Organization management Account & entitlement management Password management Audit & Compliance Audit data management Reporting, analytics & attestation Segregation of duties Fraud detection Suite Management Service levels & performance Configuration & automation

9 Oracle Enterprise SSO <Insert Picture Here>

10 Single Sign On Server Schnittstelle des Benutzermanagements Identifiziert Benutzer bei der Anmeldung am Betriebssystem Dient als Basis, um Benutzern Zugang zu den jeweils relevanten Applikationen zu gewähren Middle-Tier zwischen Benutzern und den Anwendungen esso-server Einmalige Benutzeranmeldung Diverse Anwendungsanmeldungen

11 Der erste Schritt Enterprise SSO Einfaches und schnelles Deployment von ESSO gegen alle geschützten Windows, Web, Java, and Host basierten Anwendungen Nutzung bestehender Infrastruktur für zentrale Kontrolle und Administration Bietet umfangreiches Reporting über die Nutzung der Anwendungen Oracle esso Logon Manager

12 Oracle esso Logon Manager Oracle esso Suite Management Console Directory (OID), Database (10g) Windows Domain Oracle Access Manager (OAM) Portalapplikationen Oracle Application Express AS/400 (5250) Password Oracle esso Logon Manager Java Anwendungen Oracle SQL*Plus User Auth User s Desktop Application Sign-On

13 unterstützt Windows Password Reset Unterstützt alle User wenn sie ihr Haupt -Passwort zurücksetzen müssen das Windows Passwort Integration mit Windows Authentifizierung und Administration Auf Vertrauen gestützte Identitätsüberprüfung um falsche Eingaben zu reduzieren Oracle esso Password Reset Oracle esso Logon Manager

14 Oracle esso Password Reset Architektur Reset Oracle esso Password Reset Server Windows Logon Audit, Reporting Domain Admin * Oracle esso Password Reset funktioniert nur in Windows Domänen Oracle esso Suite Management Console

15 Schnittstelle zu Identity Management Integriert mit Oracle Identity Manager (OIM) für Provisioning Zero-Touch application credential provisioning - User müssen Anwendungspassworte nicht wissen oder ändern Unterstützt bestehende Workflows und Policies aus dem OIM Unterstützt OIM Self service Passwort Features und User Self Management Reports über who accessed what for how long Oracle esso Provisioning Gateway Oracle esso Password Reset Oracle esso Logon Manager

16 Oracle esso Provisioning Gateway Provisioning Sources Oracle Identity Manager (OIM) Applications & Custom Programs Data file and Manual Entry Password Oracle esso Provisioning GW Connectors SPML Server Windows Web Sites PKI Directory (OID), Database (10g) Windows Domain Mainframes (OS390, AS400) Biometrics Provisioning Instructions Credentials Java Token/ Smart card User Auth Oracle esso Logon Manager User s Desktop Extranet & Portal Application Sign-On

17 fügt Session Security hinzu bietet User Session Security Kontrolle für shared workstations and public kiosks Überwacht den Anwendungsstart und stellt Policy basiertes, sicheres Beenden geöffneter Anwendungen sicher bietet schnelles User switching Oracle esso Kiosk Manager Oracle esso Provisioning Gateway Oracle esso Password Reset Oracle esso Logon Manager

18 Oracle esso Kiosk Manager Oracle esso KM Oracle SQL*Plus User Auth LDAP Logon Session Monitor Time out Application Shutdown Keystroke submit Closure request Process terminate Session (Initiate, Suspend, Terminate) Sign-off Oracle Portal, Application Express Oracle Forms (Web mode) Oracle Forms (text mode) Audit, Reporting

19

20 verbessert primäre Authentifizierung. Akzeptiert Authentifizierung von einer Vielzahl von Smartcards, Biometrie und Tokens Austauschbarer Einsatz vieler Authentifizierungsmethoden, die einen Fallback bieten, falls eine ausfällt. Oracle esso Authentication Manager Oracle esso Kiosk Manager Oracle esso Provisioning Gateway Oracle esso Password Reset Oracle esso Logon Manager

21 Oracle esso Authentication Manager Oracle esso AM MS CAPI smart cards SAFLINK Entrust PKI LDAP Multi-Auth Interface & Graded Auth Policies Auth API Auth API Oracle esso SM Oracle esso KM User Auth * Oracle esso AM interoperability with Oracle esso Kiosk Manager scheduled for future release

22 Oracle esso Suite Oracle esso Password Reset Oracle esso Suite Management Console Oracle esso Provisioning Gateway Password Directory, Domain, Database Web Sites Windows PKI Biometrics Token/ Smart card Oracle esso Authentication Manager Oracle esso Logon Manager Oracle esso Kiosk Manager Mainframes (OS390, AS400) Java Extranet & Portal User Auth User s Desktop Application Sign-On

23 Oracle esso Suite mit IDM Oracle esso Password Reset Oracle esso Suite Management Console Oracle esso Provisioning Gateway Oracle Identity Manager (OIM) Password Directory (OID), Database (10g) Windows Domain Oracle Access Manager (OAM) SSO Web Sites Windows PKI Oracle esso Logon Manager Mainframes (OS390, AS400) Biometrics Oracle esso Authentication Manager Java Token/ Smart card Oracle esso Kiosk Manager Extranet & Portal User Auth User s Desktop Application Sign-On

24 Analysten <Insert Picture Here>

25 Magic Quadrant Disclaimer: The Magic Quadrant is copyrighted by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Leader in Magic Quadranten Enterprise Single Sign-on, 2H 2007

26 Magic Quadrant Disclaimer: The Magic Quadrant is copyrighted by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Leader in Magic Quadranten User Provisioning, 2H 2007 Web Access Mgmnt, 2H 2007

27 Demo Oracle Enterprise SSO <Insert Picture Here>

28 Durch Oracle ESSO Suite wird erreicht: mehr Sicherheit durch die Durchsetzung mächtiger Passwortrichtlinien unsichere Passwortaufbewahrung entfällt Keylogger werden ausgehebelt Passworte sind verschlüsselt abgelegt gesteigerter Benutzerkomfort Benutzer muss sich keine Credentials merken weniger Bedenken bei Einführung neuer Software Einstieg in das Oracle Identity Management vereinfacht Benutzeranmeldung und bildet die Grundlage für integrierte IDM-Lösungen Kosteneinsparungen bei Helpdesk Administration

29 Links Keine Zeit für Kompromisse Oracle Identity Management Oracle Enterprise SSO Überblick on.html Oracle Enterprise SSO (technisch) Download Oracle Identity Management Software und Dokumentation Virtual Identity Dialogue (Mark Wilcox)

30 Weitere Informationen search.oracle.com or oracle.com

31 Fragen Antworten

32 Technische Rahmenbedingungen aus Release Notes Logon Manager

33 Unterstützte Betriebssysteme

34 Speicher und CPU Anforderungen

35 Software Voraussetzungen

36 Repositories

37 Unterstützte Browser

38 Optionale Software Unterstützung

39

40 The preceding is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle.