Presentation is loading. Please wait.

Presentation is loading. Please wait.

Gudrun Buchholz Dr. Christoph Wall electronic Administration and Services Therefore IAM Identity and Access Freie Universität Berlin.

Similar presentations


Presentation on theme: "Gudrun Buchholz Dr. Christoph Wall electronic Administration and Services Therefore IAM Identity and Access Freie Universität Berlin."— Presentation transcript:

1 Gudrun Buchholz Dr. Christoph Wall electronic Administration and Services Therefore IAM Identity and Access Freie Universität Berlin

2 International HERUG 2014, FU Berlin

3 International HERUG 2014, FU Berlin

4 4 More typical in administrative environments: International HERUG 2014, FU Berlin I have a contract, therefore I am

5 5 Proof of Identity International HERUG 2014, FU Berlin

6 6 Now after I made sure that I am … …I need to determine who or what I am.

7 7 Characteristics of Identity International HERUG 2014, FU Berlin

8 8 Theoretical Groundwork "Every thing is what it is, and not another thing." Fifteen Sermons Preached at the Rolls Chapel (1726) Joseph Butler (1692–1752) English Bishop and Philosopher

9 9 More typical in administrative environments: International HERUG 2014, FU Berlin Characteristics of identity are determined by roles

10 10 Why would anybody in IT care? International HERUG 2014, FU Berlin

11 11 International HERUG 2014, FU Berlin

12 12 International HERUG 2014, FU Berlin The Confederation of independent FU Berlin HR FI SLcM SAP Web HIS Publikations DB MyVV Profil DB Black- board FU Portal eSA Intranet Helpline Aleph IT-V DB SBK VoIP oRA BSCW

13 13 International HERUG 2014, FU Berlin Independent FUB HR FI SLcM SAP Web HIS Publikations DB MyVV Profil DB Black- board FU Portal eSA Intranet Helpline Aleph IT-V DB SBK VoIP oRA BSCW Lack of transparency of system access - No central documentation of users and authorizations Lack of IT-Security - No conclusice centrally administered deactivation of retired staff Lack of efficiency - User administration needed in every individual system

14 14 Integration as central task of IT in HER „For a long time increase of efficiency was attained by casting processes hitherto unsupported by IT into hard- and software based systems without much change to the process in question. Today the focus lies on cross-linking and integration. Thus integrated information management has become the central task for planning and deployment of modern information technology at Universities.“ „Informationsverarbeitung an Hochschulen“ Empfehlungen der Kommission für IT-Infrastruktur für 2011 – 2015 Deutsche Forschungsgemeinschaft DFG (my translation, chw) International HERUG 2014, FU Berlin

15 15 FUDIS FU Directory Service SAP Web FI HR SLcM HIS Publikations DB MyVV Profil DB FU Portal SBK Aleph Intranet Black- board oRA eSA Helpline IT-V DB VoIP BSCW 1st step of Integration: Identity Management International HERUG 2014, FU Berlin

16 16 Onboarding & Authorization (legacy architecture) International HERUG 2014, FU Berlin CUASLcM HIS HR FUDIS (FU Account) Students Employees Business Partner Student User User Ext. Teachers User Personnel Data FI User SAP Web User Teachers Employees Students Departments Authoriz. Authoriz SAP Admininstration Personnel Data Identity Data Authorization Data

17 17 Black- board SOS ZUL Aleph Org.Man. oRA BIOS CLAKS Info- DB oBi iLV SLcM HCM PSM CO FI Server and Storage Internet Services FUDIS Networks Mail ISIS Integriertes Steuerungs Informationssystem CMS CAFM Wikis, Blogs Extension of SAP Footprint SAP basiert FUDIS / IdM Systeme für Lehre und Forschung: Info-DBs: - Forschungsdatenbank - Profildatenbank - Publikationsdatenbak oBi: online Bibliothekssysteme Aleph: Bibliotheksverwaltung iLV: Lehr- und Raumplanung SLcM: Prüfungsverwaltung SOS: Studentenadministration ZUL: Zulassungsverwaltung Blackboard: e-learning Plattform CMS: FU Webauftritt Verwaltungssysteme: CO: Controlling HCM: Personalsystem (Abrechnung) Org. Man.: Organisations Management (HCM plus Grafiksystem) oRA: online Rechnungs- und Auskunftssystem FI: Finanzbuchhaltung PSM: Public Sector Management BIOS: elektr. Warenkorb CLAKS: Gefahrstoff Kataster mit Chemikalien-Bestellung CAFM: Facility Management Ablösung durch SAP

18 18 Consequences of pervasive SAP Use: International HERUG 2014, FU Berlin We never saw users in such numbers

19 19 Increase of Student Users with SLcM Roll Out International HERUG 2014, FU Berlin

20 20 Increase of staff and teachers as SAP users International HERUG 2014, FU Berlin

21 21 Challange: External Teachers not documented in HR International HERUG 2014, FU Berlin

22 22 Onboarding & Authorization (legacy architecture) International HERUG 2014, FU Berlin CUASLcM HIS HR FUDIS (FU Account) Students Employees Business Partner Student User User Ext. Teachers User Personnel Data FI User SAP Web User Teachers Employees Students Departments SAP Admininstration Personnel Data Identity Data Authorization Data Authoriz. Authoriz

23 23 IT: „Something has to be done !“ International HERUG 2014, FU Berlin

24 24 Implementation of new Identity and Access Management Top 1: New Onboarding Architecture (Proof of Identity) International HERUG 2014, FU Berlin

25 25 Proof of Identity at Universities International HERUG 2014, FU Berlin Gudrun

26 26 The of External Teachers International HERUG 2014, FU Berlin

27 27 The of External Teachers International HERUG 2014, FU Berlin Elections Masterdata Course Planning Capacity Planning

28 – 2013 Reimplementation of Academics Dataflow International HERUG 2014, FU Berlin  Improvement of data quality  Avoiding of duplicates  Reduction of user accounts to the needed number

29 29 Distributed Master Data Management (legacy architecture) International HERUG 2014, FU Berlin User SLcM Teacher Data HCM User Personnel Data User Evento Teacher Data Ext. Teachers FUDIS (FU Account) Academic Employees FacultiesCentral HR

30 30 International HERUG 2014, FU Berlin Gudrun

31 31 Masterdata where? International HERUG 2014, FU Berlin EVENTO HCM SLcM FUDIS CRM

32 32 Masterdata who? International HERUG 2014, FU Berlin Central HR Dept Faculties

33 33 Improvement of data quality International HERUG 2014, FU Berlin FUDIS FU Account Ext. Teachers HCM Academic Employees Central HR Faculties Web Dynpro

34 34 International HERUG 2014, FU Berlin

35 35 International HERUG 2014, FU Berlin Teaching

36 36 International HERUG 2014, FU Berlin Teaching Employed Non Academics Employed Academics External Teachers Associate Professors

37 37 International HERUG 2014, FU Berlin Employed Academics External Teachers Associate Professors

38 38 The Introduction of the Central Person International HERUG 2014, FU Berlin Central Person # 1 HCM Person # 2HCM Person # 3HCM Person # 1 Marcus Miller External Teacher Marcus Miller Employed Academic Marcus Miller Associate Professor

39 39 Initial Master Data Migration FUDIS => HCM International HERUG 2014, FU Berlin FUDIS 9300 Teacher-Ids 2300 Ext. Teachers HCM 2400 Inactive Teacher-IDs 3100 (Academic) Employees 1500 Both: Employees and Ext.Teachers

40 40 Avoiding of Duplicates International HERUG 2014, FU Berlin FUDIS FU Account Ext. Teachers HCM Academic Employees Central HR Faculties Central Person Duplicate Check User SLcM Teacher Data User Evento Teacher Data

41 41 Active Teachers? International HERUG 2014, FU Berlin Employed Academics Teaching Contract Period of the contract External Teachers Teaching contract for single courses Semester Ext. Teachers HCM List of courses per semester Academic Employees Hire Fire Dates Who?Why?When?How?

42 42 Reduction of user accounts to the needed number International HERUG 2014, FU Berlin Ext. Teachers: 2300 HCM 2400 Inactive Teacher-Ids (Academic) Employees: 3100 Both: 1500 Activity Control 3700 Ext. Teachers: 800 HCM Academic Employees: 2400 (Teaching) Employees: 500 April 2013: 6900 April 2014:

43 43 A Matter of Perspective International HERUG 2014, FU Berlin I‘m going to teach soon, therefore I am I‘m going to teach soon, therefore I am I still need to grade, therefore I am I still need to grade, therefore I am

44 44 Masterdata where? International HERUG 2014, FU Berlin EVENTO HCM SLcM FUDIS CRM Was the decision for HCM a good one?

45 45 Activity Matrix International HERUG 2014, FU Berlin Interface toGroupBefore Course After Course After hired in HCM After fired in HCM SLcM Employed (Academics) 3 month7 month Associate Professors 7 month External Teachers 6 month7 month Academic Supervisors 12 month Evento Employed (Academics) 3 month External Teachers 6 month7 month IDM Employed (Academics) 7 month Associate Professors 7 month External Teachers 6 month7 month Academic Supervisors 12 month HCM has to define and provide the acticity period of the teachers for other systems. It offers no standard functionality for this. The function that computes the activity of a teacher has to be implemented in all the reporting, the web dynpros for teachers, the interfaces and the query tools.

46 46 Structured Information about Teachers for IDM International HERUG 2014, FU Berlin

47 47 Implementation of new Identity and Access Management Top 2: Introduction of Roles (Characteristics of Identity) International HERUG 2014, FU Berlin

48 48 Authorization before … Authorization International HERUG 2014, FU Berlin

49 49 Introduction of Roles Authorization International HERUG 2014, FU Berlin

50 50 Introduction of Roles Authorization Group 1Group 2Group 3 International HERUG 2014, FU Berlin

51 51 Introduction of Roles Group 1Group 2Group 3Business Role 1Business Role 2Business Role 3 International HERUG 2014, FU Berlin

52 52 Role Approval Workflow AuthorizationUserApplicant IdM Key User ok Application International HERUG 2014, FU Berlin

53 53 Did it help ? International HERUG 2014, FU Berlin

54 54 Identity Management at work: International HERUG 2014, FU Berlin

55 Gudrun Buchholz Dr. Christoph Wall electronic Administration and Services Strategic Goals reached with the new IAM  Information online available about who has which rights in what system since when and awarded by whom Comprehensive offer of information  Web based role request and provisioning Mobile Information  Trans-departmental process of onboarding with single point of entry for information Smarte Processes  Automated process of user deactivation upon end of employee status Secure data  No more fees for licenses for inactive users Sustainable use of ressources International HERUG 2014, FU Berlin

56 56 International HERUG 2014, FU Berlin Dr. Christoph Wall Director administrative IT-Services Boltzmannstraße Berlin Germany Tel: Web: Gudrun Buchholz Team Lead HCM-Services Boltzmannstraße Berlin Germany Tel: Web:


Download ppt "Gudrun Buchholz Dr. Christoph Wall electronic Administration and Services Therefore IAM Identity and Access Freie Universität Berlin."

Similar presentations


Ads by Google