• Overview
• IAM Strategy
• Single Sign-On
• Provisioning/
  Deprovisioning
• Access Control
• Role Lifecycle Management
• Password Management
• IAM Program Management
• Technology Selection

Access Control

Enforce Access and Policy Control for Governance and Accountability

Access Control is a group of technical solutions that administer, make decisions about the granting of, and enforce fine-grained authorization policies (which are also referred to as entitlements). Access control includes support for privileges, access rights, permissions, and rules - depending on the platform, vendor and standard.

Access Control is currently handled by disparate technologies specific to a platform, application, network component and device, and none of these by themselves create a complete solution. This is where the value of Logic Trends comes into play with our singular focus on IAM and hundreds of successful enterprise IAM solution deployments.

Logic Trends' IAM insight and typical strategic approach is one that is externalized from the IT infrastructure and does not require application developers to continue their practice of application-centric authorization management. Instead, we leverage best of breed solutions and processes that could include:

• Federation: Federated identity management allows sharing of identity information among several entities and across domains. Tools and standards allow identity and authentication information to be transferred from one trusted identifying and authenticating entity to another.
• Authorization Management: The enforcement of a users' access can be controlled within a web services (SOA) or within the enforcement agents of web access management products. Done from the outset of a new application development process, authorization management requires little to no application modification; however, retrofitting to legacy applications usually requires application-level changes to externalize the administration and decision making of authorization management policies.
• Enterprise Access Governance: Enabling automated, auditable business processes for the management, monitoring, reporting and remediation of access rights to enterprise information assets, while enforcing accountability. With the right processes defined, supported by the right technical platform, it's easy to determine who has access to what, how they go access and whether they should have that access.