{"id":4945,"date":"2020-05-11T09:11:40","date_gmt":"2020-05-11T16:11:40","guid":{"rendered":"https:\/\/www.hmc.edu\/cis\/?page_id=4945"},"modified":"2020-05-11T09:11:40","modified_gmt":"2020-05-11T16:11:40","slug":"iamhmc-2011","status":"publish","type":"page","link":"https:\/\/www.hmc.edu\/cis\/it-matters\/iamhmc-2011\/","title":{"rendered":"IAM@HMC 2011"},"content":{"rendered":"<h2>What is the Identity and Access Management Initiative?<\/h2>\n<p>CIS launched an Identity and Access Management initiative in late 2011, after two years of exploration of technical options. The initiative, which we are calling IAM@HMC, is designed to address several issues:<\/p>\n<ul>\n<li>We have multiple systems with separate User IDs and passwords. This can be very confusing and time consuming for users.<\/li>\n<li>Account creation is currently a manual process requiring coordination between multiple departments within HMC and with other Claremont Colleges.<\/li>\n<li>There is no programmatic way of providing access to resources for users with different roles.<\/li>\n<li>Timely and accurate deactivation of accounts is also a manual process, and a challenge across the College.<\/li>\n<\/ul>\n<p>In late 2011, HMC and CUC chose to partner with <a href=\"http:\/\/www.fischerinternational.com\">Fischer International<\/a> for the IA&#77;&#64;&#72;&#77;C&#32;i&#110;&#105;&#116;iative, which has several components that will address the issues above. Shortly thereafter, we introduced <a href=\"https:\/\/www.hmc.edu\/cis\/services\/hmc-credentials\/\">HMC Credentials<\/a>. The components of the project are being implemented in phases.<\/p>\n<h3>Phase 1 (Completed January 2012)<\/h3>\n<ul>\n<li>Single Sign On (SSO) for Google Apps for Education (GAE) and Ultipro.<\/li>\n<li>Design of HMC Credentials, to use a single User ID and password to log on to multiple systems.<\/li>\n<\/ul>\n<h3>Phase 2 (Completed November 2013)<\/h3>\n<ul>\n<li>Initial setup of Password and Account Management Kiosk. (password self-service and security questions).<\/li>\n<li>HMC Password Policy implemented in HMC password and account management portal, often referred to as the Password and Account Management Kiosk.<\/li>\n<li>Password synchronization for Office365 and Active Directory to existing passwords for GAE and UltiPro.<\/li>\n<li>Join InCommon.<\/li>\n<\/ul>\n<h3>Phase 3 (Target Completion May 2014)<\/h3>\n<ul>\n<li>Develop requirements document outlining processes for Identity management.<\/li>\n<li>Build Source of Authority (SOA) combining information from CX and Ultipro.<\/li>\n<li>Automated account provisioning and deprovisioning based on information from SOA.<\/li>\n<\/ul>\n<h3>Phase 4 (Target Completion June 2014)<\/h3>\n<ul>\n<li>Portal Single Sign On and Account Provisioning.<\/li>\n<li>Activation of InCommon Federation for sites such NSF, XSEDE, Energy Sciences Network, and Educause.<\/li>\n<\/ul>\n<h3>Future Phases<\/h3>\n<ul>\n<li>High privilege access management for systems administration tasks. This will increase security on our systems.<\/li>\n<li>Integration of Claremont Colleges Common Authentication System (CAS), which will allow us to use HMC Credentials across applications housed at other Colleges.<\/li>\n<li>Addition of other applications to the single sign on environment.<\/li>\n<li>Development of two-factor authentication.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>What is the Identity and Access Management Initiative? CIS launched an Identity and Access Management initiative in late 2011, after [&hellip;]<\/p>\n","protected":false},"author":33,"featured_media":0,"parent":1222,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-4945","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.hmc.edu\/cis\/wp-json\/wp\/v2\/pages\/4945","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hmc.edu\/cis\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.hmc.edu\/cis\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.hmc.edu\/cis\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hmc.edu\/cis\/wp-json\/wp\/v2\/comments?post=4945"}],"version-history":[{"count":0,"href":"https:\/\/www.hmc.edu\/cis\/wp-json\/wp\/v2\/pages\/4945\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.hmc.edu\/cis\/wp-json\/wp\/v2\/pages\/1222"}],"wp:attachment":[{"href":"https:\/\/www.hmc.edu\/cis\/wp-json\/wp\/v2\/media?parent=4945"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}