Identity & Access Management of cloud applications

The cloud is continuing to expand in the business sector. Cloud-based applications such as Google Apps, Salesforce.com, GoToMeeting, Office 365, itslearning, AFAS Online and RAET Online are finding broad adoption. The use of cloud applications impacts the security, compliance and ROI, as end users can easily get up to speed with this type of application, without the need of intervention by application managers. However, cloud computing makes it even more difficult to control who has access to which applications and data.

User account management in the cloud

In many cases, traditional LAN-based applications already featured a type of integration (LDAP) with the central user account directory (Active Directory). This meant that the synchronization of passwords, user accounts and attributes was arranged fairly or very well. However, when applications are migrated to the cloud, these types of integrations disappear. To complicate matters, some cloud applications use completely different naming conventions and access password management standards.

Cloud solution vendors are actively involved in the development of new (business-oriented) functionality. Consequently, improved management of user accounts and access privileges is given less priority.

What does Tools4ever’s solution for Cloud IdM have to offer?

Already at an early stage, Tools4ever acknowledged that the migration of applications to the cloud would bring new challenges in the field of user and account management. With this in mind, Tools4ever developed links (connectors) that offer the following functionality:

• Password synchronization. If a password is changed in Active Directory, this change will be automatically implemented (synchronized) in the cloud application;
• Auto provisioning of user accounts linked to UMRA's proprietary user account management process, ensures synchronization of user accounts for employees through the HRM system, as well as any changes made by the helpdesk, managers and even end users. User accounts are created, modified, enabled, disabled and removed etc. in a completely automated way;
• Integrated access management from the end users to the cloud application. Accesses to various components of the cloud application are assigned/revoked on the basis of the end user's organizational role. UMRA features an advanced RBAC module that controls access to the cloud application on the basis of the department/job title in the HRM system, as well as the choices that managers have made for their employees;
• A centralized dashboard that provides IT managers with an overview of the cloud applications deployed by each user. The dashboard can be used to control the license costs as well as for logging and reporting purposes;
• Single Sign On for all cloud and web applications based on existing Active Directory credentials. This means that users are no longer required to remember a host of user names and passwords.

The advantages of Tools4ever’s Cloud IdM solution:

For end users: User accounts can be created very quickly, so that the web application is directly available and correctly provisioned. The use of Single Sign On for all cloud and web applications increases the user convenience.
For IT: Full control of user accounts, applications, authorizations and authentications. Less management burden and a reduction in the amount of password reset calls to the helpdesk. In this way, IT can ensure quick buy-in from the management for their cloud strategy.
For the management: A comprehensive log file, listing all events that are relevant for audit and compliance purposes. A quick implementation of a cloud strategy. No unnecessary expenses are incurred with regard to the use of applications or the helpdesk.