live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax:

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: E NTERPRISE I DENTITY AND A CCESS M The University of the Virgin Islands Using Microsoft’s Forefront Identity Management

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: S UMMARY  This session discusses the University of the Virgin Islands current identity and access management processes, culminating in implementation of Microsoft’s Forefront Identity Manager

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: T HE U NIVERSITY OF THE V IRGIN I SLANDS  Historically American. Uniquely Caribbean. Globally Interactive.  Approximately 2600 students  Two Campuses (St. Thomas & St. Croix) 40 miles of sea water between them

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: E NTERPRISE D ATA & U SER S ERVICES  Enterprise Applications Banner Blackboard (Gmail & Library Database Raiser’s Edge myCampus Portal

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: I DENTITIES AT UVI UVI ID number in all systems – – Network – Blackboard UVI ID Number – PeopleAdmin – Self Service Banner First 6 letters of last name + first name initial – Banner First name initial + first six letters of last name – – Network – Blackboard

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: D IVISION OF DUTIES Network Operations Staff AD Maintenance Network Access EDUS Student IdM Project

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: I SSUES WITH VARIED I DENTITIES Issue Staff and students have different IDs in systems Staff have different IDs in different systems No centralized means of giving access No centralized authentication No centralized means of deprovisioning accounts Impact

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: I SSUES (C ONT ’ D ) Issue Key system access and authentication managed by different departments Portal not fully leveraged – Group Creation – Group Membership – Messaging – Communications Impact

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: P OTENTIAL SOLUTIONS  Oracle Waveset  Oracle Identity Manager Suite  Microsoft’s Identity Lifecycle Management (ILM) now Forefront Identity Management

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: FIM SELECTED  FIM available at reasonable cost  Microsoft Campus Agreement Operating Systems Office Suite Other Software  Leverage CampusEAI expertise and support

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: P OLICIES  Devised with HR and Registrar For access parameters (limits) Name changes/account names

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: P RE -I D M C LEANUP  Enter student addresses in AD  Enter all addresses in new field in AD  Enter UVI ID in AD for staff  Resolve AD inconsistencies Campus OU Group

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: FIM D ELIVERABLES  Automate Access to groups, OUs, Campuses  Manage & AD provisioning  Use Banner as the trigger for all account creations and provisioning Authentication process Portal group creation Provisioning/De-provisioning Include a password change application

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: P ROJECT R EQUIREMENTS Expected On-site test environment Network Operations project support Outside help for cleanup Reality CampusEAI hosted test environment EDUS on it’s own (NetOps full support at project end) EDUS cleaned up AD

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: P ROJECT CHANGES  (Exchange) server failed Move to hosted for employees Had to be incorporated into FIM  Accounts created outside of FIM*  Student still on Google Apps*

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: H OW DOES IT WORK ? Like a Charm!

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: E MPLOYEES Employees After being added in Banner – Given an account in AD Placed in groups for campus, status (staff, faculty), department, gender, etc. – Given an account on – Given a unique password to access the network Students Given an account in AD Placed in groups for campus, dorm name, school of study, gender, etc. – Given an account on Google Apps – Given a unique password to access the network

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: B ONUSES  Unique password  Password management suite Remote password management

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: FIM H IGHLIGHTED  All persons requiring network access need to be in Banner  Persons with two names in the network  sharris & jharris – same employee  Persons without affiliation in the network Employees on PSAs (audit) JROTC instructors

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: K EY L ESSONS  Vendor Turnover  Timeline Clear; Reasonable  Communication Stakeholders, Colleagues  Establish Team Team Meetings Internal and External

live. learn. work. play Superior Ave E Suite 310 Cleveland Ohio Tel: Fax: