Hitachi ID Identity Manager

Identity Manager ensures that users are granted access quickly, that entitlements are appropriate to business need and that access is revoked once no longer needed.

Identity Manager implements the following business processes to drive changes to identities, groups and entitlements on systems and applications:

• Automation: grant or revoke access based on changes in trusted data (typically HR).
• Requests: users request changes to identity data or access rights -- for themselves or for peers.
• Certification: stake-holders review the status and access rights of other users, to identify access which is no longer business-appropriate.
• Workflow: users are invited to approve requests, implement approved changes or perform access reviews.
• Analytics: examine trends, access rights, data consistency and policy compliance to identify and remediate problems.

Business Challenge

Users have too many login IDs. A typical user in a large organization may sign into 10 to 20 internal systems. This complexity creates real business problems:

• Redundant and expensive onboarding processes.
• Slow and unreliable access deactivation.
• Users with inappropriate security entitlements, who may be able to intentionally or accidentally harm the organization.

These problems lead to high IT support costs, poor user service and security vulnerabilities, in some cases violating regulatory requirements.

Solution and Features

Identity Manager manages the lifecycles of identities, accounts, groups and entitlements. It includes:

• Automation to grant and revoke access, after detecting changes on systems of record.
• A web portal for access requests, profile updates and certification.
• Full lifecycle management for groups and roles on target systems.
• A workflow engine to invite people to approve requests, review access or complete tasks.
• Policy enforcement related to SoD, RBAC, risk scores, privacy protection and more.
• Reports, dashboards and analytics.

Identity Manager includes connectors to manage accounts, groups and entitlements on over 130 kinds of systems and applications, on-premises and in the cloud.