Use Case Study Name Federated User Account – and Attribute Provisioning and Management Description/User Story: Organizations can have a diverse IT landscape with many branch offices, containing their own IT infrastructures. The IT infrastructure can include Public Cloud, Private Cloud or some combination. Global Identification, Authentication and Access Management Services need to be provided in order to attain efficient information sharing and collaboration. In order to provide those services, identities along with their attributes must be provisioned from the central and multiple branch offices in a federated environment of autonomous IT enclaves. These enclaves can provide their own technology and services and be located all over the world. Identities must also be provisioned to support global access control infrastructures in order to share global resources. Additional other trusted organizations such as suppliers and partners must also contribute identities, all for the purpose of accessing and sharing information resources. Conversely, the subject organization identities must be provisioned in partner systems for sharing their resources. The identities, including their attributes, need to be made available to access control systems in a standard way. Goal/Desired Outcome: For all combinations of cloud architectures for Software As A Service (SAAS), how can provisioning of users and subsequent distribution of user attributes among various central and branch offices of an organization be effectively accomplished and governed to enable sharing of information resources? How can users, such as employees and data managers and people from other domains such as suppliers, business partners, customers and others use those attributes to participate in sharing access to appropriate information resources? Categories Covered: Applicable Deployment and Service Models: General Identity Management (IM) Infrastructure Identity Cloud Deployment Models Management (IIM) Private Federated Identity Public Management (FIM) Community Hybrid Authentication Single Sign-On (SSO) Service Models Software-as-a-Service (SaaS) Authorization Account and Attribute Management Account and Attribute Provisioning Security Tokens Actors: Systems: Users/Subscribers Central HR System Administrators Central Provisioning System COI Data Managers Central Attribute System Registration Officers Branch Office HR Systems Central HR Officials Branch Office Provisioning System
Use Case Study Name – Federated User Account and Attribute Provisioning and Management Description/User Story: Organizations can have a diverse IT landscape with many branch offices, containing their own IT infrastructures. The IT infrastructure can include Public Cloud, Private Cloud or some combination. Global Identification, Authentication and Access Management Services need to be provided in order to attain efficient information sharing and collaboration. In order to provide those services, identities along with their attributes must be provisioned from the central and multiple branch offices in a federated environment of autonomous IT enclaves. These enclaves can provide their own technology and services and be located all over the world. Identities must also be provisioned to support global access control infrastructures in order to share global resources. Additional other trusted organizations such as suppliers and partners must also contribute identities, all for the purpose of accessing and sharing information resources. Conversely, the subject organization identities must be provisioned in partner systems for sharing their resources. The identities, including their attributes, need to be made available to access control systems in a standard way. Goal/Desired Outcome: For all combinations of cloud architectures for Software As A Service (SAAS), how can provisioning of users and subsequent distribution of user attributes among various central and branch offices of an organization be effectively accomplished and governed to enable sharing of information resources? How can users, such as employees and data managers and people from other domains such as suppliers, business partners, customers and others use those attributes to participate in sharing access to appropriate information resources? Categories Covered: General Identity Management (IM) Infrastructure Identity Management (IIM) Federated Identity Management (FIM) Authentication Single Sign-On (SSO) Authorization Account and Attribute Management Account and Attribute Provisioning Security Tokens Applicable Deployment and Service Models: Cloud Deployment Models Private Public Community Hybrid Service Models Software-as-a-Service (SaaS) Actors: Users/Subscribers Administrators COI Data Managers Registration Officers Central HR Officials Systems: Central HR System Central Provisioning System Central Attribute System Branch Office HR Systems Branch Office Provisioning System