© 2006 IBM Corporation Tivoli Identity Manager Express Tivoli Access Manager for Enterprise Single Sign-On (Product Demonstrations) Tivoli Live! – 15 June 2006 Srdjan Ljubisavljevic David H Wood

IBM IT Service Management © 2006 IBM Corporation 2 Tivoli Security Portfolio Identity Manager Identity Manager Express Federated Identity Manager Access Manager for eBusiness Access Manager for OS Access Manager for BI Access Manager for ESSO Directory Server Directory Integrator Security Compliance Manager NeuSecure DataPower IBM Tivoli

IBM IT Service Management © 2006 IBM Corporation 3 Whats Hot in Tivoli Security in 2006? IBM Tivoli Identity Manager Express IBM Tivoli Access Manager for ESSO

IBM IT Service Management © 2006 IBM Corporation 4 Description: –ITIM Express is a simple, secure identity management solution that helps companies manage passwords, user accounts, and access permissions. It provides a single point to manage user identities, manage approvals for accounts and ensures services are available to those who are authorized. Delegated self-care administration provides rapid time-to- value and enables companies to quickly respond to change. Key Customer Benefits: – Easy to install, deploy and manage thereby generating a rapid ROI – Centralized approvals and documentation of access approvals to facilitate compliance – Reduce administrative costs and increase business process efficiencies Who: –Mid-market companies (< 5000 users) and departments within larger enterprises IBM Tivoli Identity Manager Express 4.6

IBM IT Service Management © 2006 IBM Corporation 5 ITIM Express 4.6 – Key Features Request-based provisioning with approval workflow User self-care and password management Intuitive GUI Recertification of user access rights Installed/Bundled adapters Out-of-the-box reporting notification HR Feeds Manual Service Account reconciliation

© 2006 IBM Corporation TIM Express Demo

IBM IT Service Management © 2006 IBM Corporation 7 Sign-On Terminology Single Sign-On Common Sign-On Reduced Sign-On Password Synchronization

IBM IT Service Management © 2006 IBM Corporation 8 X

IBM IT Service Management © 2006 IBM Corporation 9 IBM Tivoli Access Manager for Enterprise Single Sign-On IBM Tivoli Access Manager for ESSO - our enterprise single sign-on solution and serves as the base for the components below Additional ESSO Components –Desktop Password Reset Adapter - component that allows users to reset their Windows password from a locked workstation –Authentication Adapter - component that allows flexible authentication for the base ESSO product using tokens, smart cards, biometrics and passwords –Provisioning Adapter - module that allows provisioning systems to directly distribute user credentials (usernames and passwords) to TAM for ESSO –Kiosk Adapter - component that terminates inactive sessions and applications in Kiosks and shared workstations; essential for hospitals and similar environments

IBM IT Service Management © 2006 IBM Corporation 10 The Tivoli Enterprise Single Sign-on Suite TAM for ESSO Desktop PW Reset Adapter TAM for ESSO Console TAM for ESSO Provisioning Adapter Tivoli Identity Manager TAM for ESSO Authentication Adapter TAM for ESSO Core TAM for ESSO Kiosk Adapter Directory/ DB SECURID Password PKI Biometrics Token/ smart card User Auth Users Desktop TAMeb Application Sign-On Windows Web sites Mainframes Sign On Sign Off User

© 2006 IBM Corporation TAM ESSO Demo

IBM IT Service Management © 2006 IBM Corporation 12 Taking Our Own Medicine IBM Tivoli Directory Server – Blue Pages (> 300K entries) IBM Tivoli Security Compliance Manager IBM Tivoli Access Manager for eBusiness – access to w3.ibm.com portal IBM Tivoli Access Manager for ESSO – on TAP Etc.

IBM IT Service Management © 2006 IBM Corporation 13

IBM IT Service Management © 2006 IBM Corporation 14