140 likes | 276 Vues
In this session, Barry R. Ribbeck, Director of Systems Architecture & Infrastructure at Rice University, discusses the evolution of identity management from a mere technological infrastructure to a critical component of business strategy for higher education institutions. With increasing electronic interactions in collaboration with partners and governmental bodies, he emphasizes the need for scalable identity management solutions that ensure security, trust, and compliance. Discover how to effectively integrate identity management into your institutional planning to enhance operational efficiency and drive bottom-line contributions.
E N D
The Business of Identity ManagementBarry R. RibbeckDirector Systems Architecture & InfrastructureRice UniversityBarry.R.Ribbeck@rice.edu .
Identity management is often seen as a technological infrastructure that supports portals or reduces logins required for central systems. However, emerging trends point to opportunities to leverage it for bottom-line contributions to the institution. Sponsored by NMI-EDIT, this session will discuss why identity management should be part of your business strategy
Changes • HE Institutions are not islands • Partnerships and collaborations • Business • Government • Communities • Interactions with externals are increasingly becoming electronic based
Examples • Government - Online Grants • Banks - Online payroll transactions • Utilities & Vendors- Online payments • Students - Online registration • Financial - Online Federal Aid • Information - Online Libraries • Research - Grids, Fastlane, etc.. • Courseware - Online course management
Business Challenges • Support • Scale - too many accounts • Security - • account requirements differences • Management • Trust - the keystone of inter institutional collaboration and a critical business practice • Costs
ROI Potentials • Pharmaceutical Industry numbers • > $1 billion per year in identity credentialing models • 40% of annual R&D costs attributed to paper based business processes • NE Journal of Medicine • Paperwork = 31% of all health costs ($500 billion in 2004)
External Drivers • Federal eGov Initiative • Fastlane • Digital Content Providers • Banking industry • SAFE - Pharmaceutical industry • Certipath -Aerospace
Fundamentals & Federations • A federation is an association of organizations that come together to exchange information as appropriate about their users and resources in order to enable collaborations and transactions. • Policy based authentication and authorization • IAA are business processes not just technical processes • Provide for Scaleable Identity Management • Standards based community infrastructure • Well defined Trusts
IdM Business Practice • We (HE) need to know who we are interacting with as do our partners. • Identity management is evolving from pure technical practices to a business process. • We will not be able to continue using the old methods and practices in the near future. • Government is aware that IdM is an important issue and is making changes in the way they interact electronically with HE. • Legal compliance • We need to understand the value of TRUST
Transitions • How do I sell this to administration? • Not hard to find support in business circles, Pick any IT consulting firm, CIO magazine, Educause, IT auditor reports. • How / where do I begin? • Resources, roadmaps, self evaluations, IT audits See appendix • Business drivers that make IdM a real need for HE • The future of Access?
Reading the Signs • Title 2 of H.R. 418 (Real ID Act) • HIPAA (PRIVACY) • eGOV (authentication initiative of the Fed) • GLB (protecting consumer personal financial information) • Texas Medical Privacy Act (SB11) (Hipaa on steroids) • Texas S.B. 122 (identity theft - information spill) • Texas BPM 66 (SSN use reform)
What Should campuses do today? • Start building your IdM infrastructure • Approach from a business practice perspective. Look at security, confidentiality, trust and business continuity. • Join a federation, prepare for eGov CAF • Encourage business partners to embrace IdM • Define your policies around good business practices not just easiest technology to implement.
Change is upon us but we don’t have to panic, we just need to prepare. • IdM is a core business practice, and we need to begin to address it in that manner • Trust is a precious and tenuous commodity. We should protect it the way we do other business resources.
REFERENCES • http://www.incommonfederation.org • http://www.cio.gov/eauthentication//documents/CAF.pdf • http://shibboleth.internet2.edu/ • http://www.nmi-edit.org/index.cfm • http://www.educause.edu/IdentityManagementWorkingGroup/928