Mastering Identity and Access Management with Microsoft Azure
上QQ阅读APP看书,第一时间看更新

Additional solution

Based on our many years of experience and successfully implemented projects in the area of Identity and access management, we've decided to map the recurring requirements in our solution that fill the gaps we couldn't fulfill with the MIM standard functionality.

The following five key pillars will be provided by our solution and enable us to implement highly standardized identity and access-management processes that are flexible and customizable:

Inovit Identity solution - building blocks

The main features of Organizational Management and the frontend are the following:

  • Supports several cloud scenarios and traditional IT infrastructures
  • Representation of the organizational structure (parameterization and inheritance)
  • Management of the organizational structure (manual or synchronized)
  • Allows you to build efficient, role-based access controls
  • Enables you to deliver beneficial cost management
  • User-friendly and highly responsive frontend
  • Single page application (SPA) architecture
  • Integrated governance features
  • No SharePoint installation required
  • Highly customizable
  • Single frontend for on-premises or cloud-only deployment
  • A clear strategy for future invests
  • Cloud management

The following screenshot schematically shows the frontend:

Identity Directory SPA portal

The main features of User Management are as follows:

  • Standard processes (onboarding, mutation, offboarding)
  • Time-limited user accounts
  • Management of standard and administrative user accounts
  • Management of Azure B2B accounts
  • Automatic samAccountName and user generation
  • Alignment of UPN, email, and SIP for cloud usage
  • Password reset and account unlock

The following screenshot schematically shows the positions and role assignment in the frontend:

Identity Director position-based Access Management

The main features of Access Management are the following:

  • Position-based, role-based, attribute-based access management
  • Permissions directly assigned to a user (if required)
  • Approval and notification workflow support
  • Administration of privileged accounts
  • Authorization direct views and reports
  • Bidirectional interfacing with services such as SharePoint and Microsoft teams

The main features of Service Management are as follows:

  • Automated and straightforward adaptation of systems and services
  • Representation of the service catalog
  • Synchronization-based order units
  • Workflow-based order units (notification and approvals)
  • Management of Office 365 and other cloud services