Pre-Con Ed (Lab): CA Identity Suite—Raising the Bar on User Productivity and System Efficiency

World®’16

CAIdentitySuite—RaisingtheBaronUserProductivityandSystemEfficiencyMatthewK.Miller– Sr.PrincipalConsultant– CATechnologies

SCX02E

SECURITY

1 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

ForInformationalPurposesOnlyTermsofthisPresentation

©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.Thepresentationprovided atCAWorld2016isintendedforinformationpurposesonlyanddoesnotformanytypeofwarranty.Someofthespecificslideswith customerreferencesrelatetocustomer'sspecificuseandexperienceofCAproductsandsolutionssoactualresultsmayvary.

CertaininformationinthispresentationmayoutlineCA’sgeneralproductdirection.Thispresentationshallnotserveto(i)affecttherightsand/orobligationsofCAoritslicenseesunderanyexistingorfuturelicenseagreementorservicesagreementrelatingtoanyCAsoftwareproduct;or(ii)amendanyproductdocumentationorspecificationsforanyCAsoftwareproduct.Thispresentationisbasedon currentinformationandresourceallocationsasofNovember1,2016,andissubjecttochangeorwithdrawalbyCAatanytimewithout notice.Thedevelopment,releaseandtimingofanyfeaturesorfunctionalitydescribedinthispresentationremainatCA’ssolediscretion.

Notwithstandinganythinginthispresentationtothecontrary,uponthegeneralavailabilityofanyfutureCAproductrelease referencedinthispresentation,CAmaymakesuchreleaseavailabletonewlicenseesintheformofaregularlyscheduledmajorproductrelease.SuchreleasemaybemadeavailabletolicenseesoftheproductwhoareactivesubscriberstoCAmaintenanceandsupport,onawhen andif-availablebasis.Theinformationinthispresentationisnotdeemedtobeincorporatedintoanycontract.


Agenda

CAIDENTITYSUITEOVERVIEW

CAIDENTITYANALYTICS&LAB

ACCESSREQUESTRECOMMENDATIONS&LAB

CERTIFICATIONCAMPAIGNS&DEMONSTRATION

MOBILEEXPERIENCE&DEMONSTRATION

1

2

3

4

5


CAIdentitySuiteOverview


MainConceptsofCAIdentitySuite

BridgingtheGap SimplicityOneStopShop

Concepts


CAIdentitySuiteServices


CAIdentityPortal


CAIdentitySuite12.6.8NewCapabilities


CAIdentitySuite12.6.8KeyBenefits

§ Strengthensoperationalefficiencies– Addsanalyticsthatprovideinsightintotheperformanceoftheidentityandaccessgovernanceprocess.Withidentity

performanceanalytics,customerscanquicklyaddressissuesandtunetheirprocessestohelpidentityandeliminatebottlenecks,meetservicelevelcommitmentsandimprovegeneralidentityoperations.

§ Improvestheuserexperienceanduserproductivity– Addsnewpersonalization capabilitiesandoptionsforusersresponsibleforaccesscertification;providesmore

informationthewaytheuserwantstoseeit.– Providescontext-basedsuggestionswhichhelpusersgettheaccessthattheyneedtosuccessfullydotheirjob.– Providescomprehensivemobilesupportsoeverythingausercandoathis/herdesk,canbedoneviamobile.

§ Improvestime-to-value– Simplifiesdeploymentthroughout-of-the-box,pre-configuredcustomerusecases,helpingtoreducethetimeittakes

togetcommonuserscenariosupandrunningforfastertime-to-value.

©2016CA.AllRIGHTSRESERVED.


CAIdentityPortalMobile


SystemEfficiencyConfiguringCAIdentityAnalyticsAdministrating>AdministratingCAIdentityPortal>CAIdentitySuiteAdministration>AnalyticsDashboard


IdentityAnalyticsEmpoweringtheBusinesstoAchieveOperationalExcellencewithReal-timeAnalytics

§ OperationalExcellenceConsoleforManagers§ Centralizeddashboardprovidingaunique

viewofallidentitylifecycleprocesses§ Allowmanagerstoanalyzeprocessesanddrill

downintopotentialproblemsandremediatethem

§ Improvesefficiencyandproductivityoftheenterprise

§ SLAstatisticsgiveprojectsponsorsbusinessjustificationforprojectROI

©2016CA.AllRIGHTSRESERVED.


AnalyticsDashboardOverview


WhoCanSeeAnalytics?

Profile ScopingRule:Profilescanbelimitedtoasubsetof

usersbasedonuserattributes,entitlements,groupmembership

oracombination


WhatTypesofAnalyticsGathered?

Analytics Tracking:AccessCatalogItems(Add,Remove,Modify)IdentityProcesses


AccessCatalogItems

ProvisioningRoleasdefinedinCAIdentityManagerAnalyticsGathered

Numberoftimesrequested/removedDurationofprovisioning(min/max/avg)Associatedapprovals(ifapplicable)


IdentityProcesses

IdentityPortalTaskislinkedtoIdentityManagerAdminTaskAnalyticsGathered

NumberoftimesprocessedDurationofprocess(min/max/avg)Associatedapprovals(ifapplicable)


AnalyticsDashboardOverview Once enabled,analyticsdataiscollectedandavailable


EnablingAnalytics


DefineAnalyticsViews

Analytics Viewsarethemetricsgathered


CreatingAnalyticsViews

Only2AnalyticsViewsmaybeenabledglobally


TypesofAnalyticsViews

Requester:attributesabouttheindividualsubmittingthetask/makingtherequestSubjectoftheRequest:attributesabouttheindividualbeingprocessed/receivingaccessAformproperty:attributegatheredfromtheformsubmittedaspartoftheprocess/request


What’stheDifference?

JeffAndrewsManager

ElizabethTalbotUser

Title=ManagerUserID=andje01

Title=DeveloperUserID=talel01

JeffRequestsAccessforElizabeth

Requester|Title=ManagerSubjectoftherequest|Title=Developer



JeffAndrewsManager

ElizabethTalbotUser


Title=DeveloperUserID=talel01

ElizabethRequestsAccessforHerself

Requester|Title=DeveloperSubjectoftherequest|Title=Developer

Requester|ManagerID=andje01



JeffAndrewsManager


JeffCreatesNewContractor

FormProperty|ContractPeriod=90DaysRequester|ManagerID=andje01


WhataretheDataPoints?

Durationtocompleteintimescale

Numberofrequestsstartedonthedate


HowdoIReadtheCharts?

Averagedurationoverthecourseofthetimeframe

Totalrequestsoverthecourseofthetimeframe

Longestdurationoverthecourseofthetimeframe

Shortestdurationoverthecourseofthetimeframe



RequestscreatedonJanuary3rdtookonaverage9days

1request wassubmittedonJanuary3rd



Hoverovertoviewresultoftheprocessoverthecourseof thetimeframe




ExportAnalytics


ExcelSpreadsheetExport


FlatFile(.csv)Export

MicrosoftExcelView

Notepad++View


ImageExport


BreakingDowntheWorkflow

Dataavailable onlyifaworkflowisassociatedtotheIDMtask


WorkflowDetails– Level1

Selectthenode togetdetails



Selectanactortogetadditionaldetails



Outcomesproducedbytheactorselected


ExporttoImages


ExportedImages


ConfiguringCAIdentityAnalyticsLab


ConfiguringCAIdentityAnalyticsLab

§ Set-upAnalyticsCapability

§ DefineAnalyticsViews

§ Showanalyticsaroundsalesforce.comaccessrequests– ProvidemetricsonManagersapprovingaccess– Providemetricsondepartmentsrequestingtheaccess

§ WillshowSLAoncompletedtransactions


LogIntoCAIdentityManagerAdminUI

CAdemo123

superuser


Validate/Modify‘CreateWebServices’AdminTask

*CreateWebServices*


EnsureHideinMenusisnotSelected


EnsureWebServicesConfigurationExists

ShouldAlreadyExistforCAIdGIntegration


CreateWebServiceifitDoesn’tExist ONLYPERFORMIFNOWEBSERVICE

DEFINITIONEXISTED


LogintotheCAIdentityPortalAdminUI

CAdemo123

sigma


OpenIdentityPortalCAIdM Connector

ONLYPERFORMIFNOWEBSERVICE

DEFINITIONEXISTED


EnterWebServiceDefinitiontoConnector

WebServicesName

WebServicesURL


DEFINITIONEXISTED


SaveConnector


DEFINITIONEXISTED


EnableAnalytics


OpenAnalyticsViews


CreateAnalyticsView– Department


CreateAnalyticsView– ManagerID


CreateAnalyticsView– ManagerID


OpenEntitlementTree


SelectSalesForce TargetPermission


OpenAnalyticsandSelectEmployeeDept.


Before YouSavetheAnalyticsViews


Ensuresalesforce.comisChecked;thenSave


RestarttheCAIdentityManagerConnector

Waitfortheconnectortorestart


OpenIdentityPortaltoTest


LogintoPortal

CAdemo123

danka01


NavigatetoAccessCatalog


SelectRequestforSelf


OpenApplicationsCatalog


AddCRM– salesforce.comtoCartandCheckout


CheckStatusofRequest


RequestisPendingApproval- Logout


LoginasJeffAndrews;Kara’sManager

CAdemo123

andje01


ClickonTaskstoApprove


ApprovetheTaskandLogout


LogintoPortal

CAdemo123

garan01


NavigatetoAccessCatalog


SelectRequestforSelf


OpenApplicationsCatalog


AddCRM– salesforce.comtoCartandCheckout


CheckStatusofRequest


RequestisPendingApproval- Logout


LoginasTonyBelli;Anne’sManager

CAdemo123

belto01


ClickonTaskstoApprove


ApprovetheTaskandLogout


ItTakesaFewMinutesfortheAnalyticstoBeRendered…


LoginasJeffAndrews;Kara’sManager

CAdemo123

andje01


ClicktheAnalyticsModule


Typein“Sales”ToSelectsalesforce.com


Results


HovertoSeeNumberofRequests,thenClickAnalyze


AnalyzeShowsBreakoutofAnalyticsViews;thenClickWorkflowonTop


WorkflowShowsActor’sInteraction


WhatWeAccomplished

§ Set-uptheAnalyticsfeature

§ DefinedAnalyticsViews

§ Showedanalyticsaroundsalesforce.comaccess– Managersapprovingaccess– Departmentsthathadusersrequestingtheaccess

§ SawtheSLAfortwocompletedtransactions


ConfiguringReal-TimeDecisionSupportTools


Real-TimeDecisionSupportToolsContextBasedRecommendations

§ Easy-to-useaccessrequestprocessthroughanintuitive'ShoppingCart‘experiencejustgotsmarter.

§ AdviceToolssuchasreal-timecontext-basedaccessrecommendations

§ Recommendationsandsuggestionsarecalculatedanddisplayedinreal-timeduringaccessrequests

§ Suggestionsarecontext-based,i.e.Basedonusers’attributes,currentaccessandrequestedaccess





Recommendations

§ ReverseofanSoDrule;whatyouMAYwantvs.whatyouCAN’Thave

§ Basedonwhoauseris(attributes)orwhatauserhas(existingaccessprivileges)

§ Dynamicallycalculatesuponaddingentitlementstoshoppingcart

§ Canstillbegovernedbyapprovalworkflows


SuggestionsConfiguredwithinthePortalAdminUI


SuggestionDefinition

Message thatappearstotheuserprovidingcontext



Whichtargetpermission(s)willberecommendedtotheuser



Whenwillthesuggestionbemade



§ User’sattribute:basedonwhoauseris

§ User’sPermissions:basedonwhatauserhas

§ Group:supportforcomplexcombinationsofattributesandpermissions

We’llconfiguresuggestions foreachoftheseinthelab


WhythisissomethingYouShouldUse

§ Enableuserstogaincommonaccessthatmaynotapplytobirthrightaccess– Decreaseentitlementclutter

§ Providecontexttonewusers– WhatdoIneed?

§ Complementaryaccesstoapplicationsforincreasedproductivity– AmIgettingthefullbenefitoutofanapplication?


ConfiguringReal-TimeDecisionSupportToolsLab


Real-TimeDecisionSupportToolsLab

§ ConfigureUserPermissionsSuggestion– Willsuggestsalesforce.com– WillrecommendifuserhasaccesstotheCRMApplication

§ ConfigureaComplex(Group)Suggestion– WillsuggestCAServiceManagement– Tier1Supportaccess– WillrecommendifuserisamemberoftheHelpDeskLDAPGroup,OR– WillrecommendifauserisintheITServicesDepartmentandhas

Tier2Supportaccess


LogIntotheCAIdentityPortalAdminUI

CAdemo123

sigma


ConfigureAccessCatalog


SuggestionDefinitionPage


DefineNameandMessage;thenclickAddPermissions


ScrollDownandSelectsalesforce.com


ClickAddCondition


SelecttheUser’sPermissionOption


ScrollDownandSelectCRMApplication


SavetheNewSuggestion


CreateaNewSuggestion


DefineNameandMessage;thenClickAddPermissions


ScrollDownandSelectTier1Support


ClickAnyUnderwhentoApplyandthenAddCondition


SelecttheGroupOption;thenAddCondition


AddtheFirstConditionfortheFirstSuggestion


AddtheSecondConditionfortheFirstSuggestion


ScrollDownandSelectTier2Support


AddtheConditionfortheSecondSuggestion


DefinetheCondition


ScrollDownandSelectHelpDeskGroup


SavetheSuggestion


LoginintoIdentityPortalas

CAdemo123

ferma01


ClickAccess;RequestForSelf


ExistingCRMAccessPresentstheRecommendation

Noticeshe hastheCRMaccess


HoverOvertheSuggestion

Clickingherewill addtheaccesstotheshoppingcart.

Willclear thesuggestion.


LoginasKaraDanvers

CAdemo123

danka01


ClickAccess;RequestforSelf


ExistingCRMAccessPresentstheRecommendation

Karahas2recommendations, butnottheoneforServiceManagement;sheisinITServices,butdoesn’thaveTier2access


FindCAServiceManagement


AddTier2SupporttotheShoppingCart

Nowthatshehas Tier2accessinhercart,shesatisfiesbothconditionsforthefirst

recommendationcritieria


LoginasGregImaroni

CAdemo123

imagr01


ClickAccess;RequestforSelf


GreghasHelpDeskGroupAccess

Gregsatisfies theconditionforthesecondrecommendationcriteria.


WhatWeAccomplished

§ ConfiguredaUserPermissionsSuggestion– Suggestedsalesforce.combasedonauser’sexistingentitlement:

CRMApplication

§ ConfiguredaComplex(Group)Suggestion– SuggestCAServiceManagement– Tier1Supportaccessbasedontwo

differentconditions;§ IfuserisamemberoftheHelpDeskLDAPGroup,OR§ IfauserisintheITServicesDepartmentandhasTier2Supportaccess


CertificationCampaigns

§ Simplifiesandcentralizesallnecessarycomplianceactivitiesinoneplace.

§ Businessentitlementscataloguesimplifiescertifications

§ Riskanalysishighlightsriskyaccessto:– Enablereal-timeremediation– Improvepolicyenforcement– Simplifyregulatorycompliance

§ Easilycustomizablefortheneedsofeachrole/user

CertifyUsersAccessinaFriendlyEfficientMethod

CRMCustomerview

UpdateHRreports

ViewBillingReports

Tableofcontents

Detailedinformation

Personalizedview

Progressbar


TableofContents

Listofallactivecertificationsassignedtotheuser.

Clickingonacampaignexpandstothelistof

users


TableofContents– Sortablility

Organizesbyusers

Organizesbyresources/entitlements

Organizesbyroles


DetailedInformation


PersonalizedView

MetadatastoredinCAIdentityGovernance


IdentityOnTheGOTheMostComprehensiveMobileApplicationintheMarket

Requestapproval Passwordmanagement CertificationcampaignsBranding Performaccessrequests


MobileExperiencecanbeBranded

TheMenuwillexposeallin-scopemodulesfortheuser

Asubsetofthein-scopemodulesaredisplayedfortheuser


MobileAccessRequests

Shoppingcartexperienceinamobileformat


MobileAccessApprovals

Approvalandimplementationworkflowsexposed

Approvalactions:Approve,Reject,Reserve,Reassign


MobileCertifications

Simplifiedviewoftheentitlements


MustSeeDemos

OnboardEnterpriseUsers

CAIdentitySuite,CAIdentityServiceCAAPIManagement

SECSE001

EnableaHybridLaunchpad

CAIdentityService

SECSE003

StreamlineIdentityGovernance

CAIdentitySuite

SECSE005

ControlPrivilegedAccess

CAPrivilegedAccessManager

SECSE004


Security

FormoreinformationonSecurity,pleasevisit:http://cainc.to/EtfYyw


Stayconnectedatcommunities.ca.com

Thankyou.

Technology

Pre-Con Ed (Lab): CA Identity Suite—Raising the Bar on User Productivity and System Efficiency