1.0 |
|
Overview |
|
1.1 |
|
Drivers and Benefits |
1.2 |
|
IAM Architecture, Controls, Processes and Governance |
1.3 |
|
A Functional View of IAM |
1.4 |
|
Key Technology Areas |
|
2.0 |
|
Directory Technologies |
|
2.1 |
|
Directory Services: X.500 and LDAP |
2.2 |
|
Metadirectories |
2.3 |
|
Virtual Directories |
|
3.0 |
|
Identity Administration |
|
3.1 |
|
User Provisioning |
3.2 |
|
Role Management for Enterprises |
3.3 |
|
Resource Access Administration |
3.4 |
|
Credential Management |
|
3.4.1 |
|
Password Management |
3.4.2 |
|
Public Key Services: Public-Key Infrastructure and Public-Key Operations |
3.4.3 |
|
Card Management |
3.4.4 |
|
Shared Account Password Management |
|
3.5 |
|
Identity Administration and IT Service Management |
|
4.0 |
|
Identity Auditing |
|
4.1 |
|
Identity Auditing |
4.2 |
|
Segregation of Duties Controls Within Enterprise Resource Planning |
4.3 |
|
Security Information and Event Management |
4.4 |
|
Other Monitoring Tools |
|
5.0 |
|
Identity Verification |
|
5.1 |
|
Identity Proofing |
5.2 |
|
Authentication |
|
5.2.1 |
|
Authentication and Transaction Assurance |
5.2.2 |
|
Authentication and Physical Access Control Systems |
|
5.3 |
|
Authentication Infrastructure |
5.4 |
|
Single Sign-On |
|
5.4.1 |
|
Kerberos |
5.4.2 |
|
AD/Unix Integration |
5.4.3 |
|
ESSO |
5.4.4 |
|
Bundled Smart-Token-Based SSO |
5.4.5 |
|
Web SSO |
5.4.6 |
|
SSL VPN |
|
5.5 |
|
Federated Identity Management |
5.6 |
|
Personal Identity Frameworks |
|
6.0 |
|
Access Management |
|
6.1 |
|
WAM |
6.2 |
|
OS Access Management |
|
6.2.1 |
|
Superuser Privilege Management |
|
6.3 |
|
Authorization Management |
6.4 |
|
Content Access Management |
|
6.4.1 |
|
CMF/Data Loss Prevention and Virtualization as CAM |
|
6.5 |
|
NAC |
|
7.0 |
|
Summary: The Complete Picture |