Identity & Access Management Overview

 

To compete in the new economy, organizations need to provide efficient and secure access to their internal applications and data for external entities, such as business partners, customers, and mobile employees. Users need to access diverse systems and resources on the corporate network, from different types of devices. But because many of these systems don’t communicate well with each other, individual users often need to use multiple identities. This proliferation of user IDs and passwords can create burdensome manual practices and inconsistent security policies.

 

As a result, managing these redundant identities and access privileges becomes complex, wastes time, and increases security risks due to errors.

 

Microsoft has fundamentally changed the approach to identity and access management with the following products:

 

 

This product changes the current state of identity management by providing powerful end user self-service capabilities. IT professionals are also given more tools to solve day-to-day tasks such as delegating administration and creating workflows for common identity management tasks. In addition, FIM 2010 is built on a .NET and WS-* based foundation for developers to build more customized and extensible solutions.

 

 

Delivers comprehensive, secure remote access to corporate resources for employees, partners, and vendors on both managed and unmanaged PCs and mobile devices. Utilizing a combination of connectivity options, ranging from SSL VPN to DirectAccess, as well as built in configurations and policies, UAG provides centralized and easy management of an organization's complete anywhere access offering.

 

 

This service enables customers to augment their security strategy by protecting information through persistent usage policies, which remain with the information, no matter where it is moved. Customers can use AD RMS to help prevent sensitive information—such as financial reports, product specifications, customer data, and confidential e-mail messages—from intentionally or accidentally getting into the wrong hands.

 

 

Server role in Windows Server that provides simplified access and single sign-on for on-premises and cloud-based applications in the enterprise, across organizations, and on the Web. AD FS 2.0 helps IT streamline user access with native single sign-on across organizational boundaries and in the cloud, easily connect applications by utilizing industry standard protocols and provide consistent security to users with a single user access model externalized from applications.

 

 

This product enables .NET developers to externalize identity logic from their application, improving developer productivity, enhancing application security, and enabling interoperability.