Tivoli Access Manager for e-business is a versatile solution for
authentication and authorization problems. Primarily focused on Web
applications, Access Manager implementations vary from simple Single
Sign-on (SSO) to more complex security infrastructure deployments.
Access Manager for e-business can help you manage growth and complexity,
control escalating management costs, and address the difficulties of
implementing security policies across a wide range of Web and
application resources. It works by centrally managing security and audit
policy for enforcement points that can be placed as a proxy in front of
Web applications, or through authorization and authentication plug-ins
direct into a Web server or application-server environment. You can use
Access Manager to control wired and wireless access to applications and
data, to help bar unauthorized users. For authorized users, Access
Manager integrates with Web applications and servers to deliver a
secured and unified business experience. It helps you secure access to
business-critical applications and data spread across the extended
enterprise, allowing highly available, scalable transactions with
partners, customers, suppliers, and employees.
Tivoli Access Manager for e-business helps:
* Define and manage a centralized authentication, access, and audit
policy for a broad range of business initiatives such as employee,
customer and partner portals, CRM systems, e-procurement, cross-company
single sign-on (SSO) projects, and outsourcing projects.
* Establish a new audit and reporting service which collects audit
data from multiple enforcement points as well as from other platforms
and security applications. A central point for reporting on security
events and sample reports are included
* Enable a flexible SSO to Web-based applications that can span
multiple sites or domains with a range of SSO options, to help eliminate
help-desk calls and other security problems associated with multiple
passwords. By integrating with other SSO providers (such as Kerberos
from a Microsoft domain logon, and client/server SSO solutions) Access
Manager goes beyond 'reduced sign-on' to help implement a single
authentication for the user across all system interactions. For
standardized cross-domain authentication (federation) using SAML,
Liberty ID/FF, and WS-Federation, Tivoli Access Manager for e-business
customers can also upgrade to Tivoli Federated Identity Manager.
* Leverage a common security policy model with the Tivoli Access
Manager family of products to extend support to other resources, such as
WebSphere MQ applications, and UNIX and Linux system resources.
* Provide a base for Federation: Companies that choose to
collaborate in identity-based business processes may benefit from IBM
Tivoli Federated Identity Manager's ability to help simplify integration
between companies and their partners' Web sites. Federated SSO
solutions, such as Tivoli Federated Identity Manager add standardized
cross-domain SSO (SAML, Liberty, WS-Federation) to a security system.
However these typically need first-point-of-contact and session
management to already be in place; Access Manager fills that role (and
Access Manager for e-business customers can upgrade to Tivoli Federated
Identity Manager if federation becomes a requirement in the future).
* Manage and secure your business environments from your existing
hardware (mainframe, PCs, servers) and operating system platforms
including Windows, Linux, AIX, Solaris, and HP-UX.
Other Key Features:
Policy-driven security helping to enforce compliance
You can group users and assign permissions to groups, simplifying
administration of access control across multiple applications and
resources. There is support for dynamic rules, dynamic business
entitlements, and authorization decisions based on external data for
applications that require it.
Enhanced Auditing helping to streamline reporting with Common Auditing
and Reporting Services (CARS)
The new version of Tivoli Access Manager is the first product to include
IBM.s new Common Auditing and Reporting Service (CARS) platform, which
provides a consistent way to audit and report on data. Currently, it is
difficult for enterprises to gather required information on who accessed
what application/data when. For example, this can help ensure that
financial data applications or HR applications with sensitive
information are accessed appropriately. CARS automates the collection of
audit data and provides the ability for enterprises to centrally view
and report audit data that are critical for compliance needs. This
allows the audit process to be much more efficient and reduces the cost
of compliance.
Download File Size:571.14 MB
|
