When IGA meets PAM ... through their mutual friend SCIM

When IGA meets PAM…
Through their mutual friend SCIM
Kelly Grizzle

You might be starting to feel like…

To avoid this … we’ll have FUN WITH MAD LIBS!!!

Gimme some words!!!
Emotion
Adjective
Plural noun
hung overness
strong
computers

What are we talking about?
• What is IGA?
• What is PAM?
• What’s the problem?
• How do we join these two worlds?

What is IGA?

Identity Governance and Administration
Governance
• Access Review
• Approval
• Policy Checking
• Role Management
• Analytics
• Auditing
Administration
• Access Request
• Account Management
• Password Management
• Identity Lifecycle
Management
• Provisioning
• Automated Workflows

Words!!!
Occupation that starts with “C”
Plural noun
Place
dogs
Coroners
Bars

What is PAM?

Copyright © SailPoint Technologies, Inc. 2017. All rights reserved. 12Copyright © SailPoint Technologies, Inc. 2017. All rights reserved. 12
Privileged Access Management
Controls access to privileged data –
most often credentials for privileged
accounts

Privileged Account Management Provides
• Account sharing
• Tracking and auditing actions taken with privileged accounts
• Passwords become invisible to end users
• Automatic rotation of credentials
• Highly secure passwords

More words!!!
Adverb
Body part
Plural noun
Adjective
fingernail
slowly
identerati
handsome

What’s the problem?

Two Amazing … But Siloed … Technologies
• Historically, IGA and PAM systems have not been integrated
• Most companies that care about security have a need for both
• IGA software is a bit weak in dealing with shared accounts
• Who owns the account?
• How do you request access to a shared account?
• PAM software does not provide governance controls
• No access reviews
• No policy checking
• Etc…

Words Please!!!
Plural noun that starts with “M”
Emotion
Food or drink
fearful
Monkeys
coffee

How to join these
worlds … SCIM!

What is SCIM?
System for Cross-Domain Identity Management

Identity Management
+
REST
=

SCIM PAM Extension
• SCIM provides a REST API and JSON representations for users
and groups
• The SCIM PAM Extension is a new specification that augments
SCIM 2.0 to bridge IGA and PAM
• New concepts in SCIM PAM extension:
• Privileged data
• Containers
• Access control lists for containers and privileged data

Who is involved?
And more…

The Payoff???
• There is now an industry standard to integrate IGA and PAM
• Standardized API allows any two solutions to plug together easily
• No software upgrades required to support new vendors
• IGA and PAM systems no longer have to be siloed

Final words!!!
Occupation
Place
Positive characteristic
Plural noun
The White House
Movie Critic
enthusiastic
sheep

Do you believe in ___________ at first sight? Well neither did
Iggy or Pam. At least not until that ___________ day six
months ago. You see, both Iggy and Pam grew up believing
that a person can be ___________ in life with any number of
the billions of ___________ on this earth.
When IGA meets PAM …
hung overness
strong
fearful
computers

Iggy and Pam both shared the same profession, and as luck
would have it, they both attended the conference for the
Society of _________________ in favor of ______________
(aka – SCIM). In fact, on Thursday … the last day of the
conference … they happened to sit next to each other in the
session - ____________ are from ___________
___________ are from ______________ - presented by the
brilliant ____________________, Professor Griz.
Movie Critic
The White Housesheep
Barsidenterati
MonkeysCoroners

In this session, Pam learned that even though she was very
________________ that she often lacked transparency. Iggy
learned that his most sensitive part – his ________________
_______________ – deserved the same level of attention and
protection as the rest of himself. Through these epiphanies,
Iggy and Pam both realized that they needed each other. Iggy
asked Pam if she would like to join him that evening for
_______________. She said yes, and the rest is history.
They lived ____________ ever after – thanks to SCIM and
Professor Griz.
enthusiastic
slowly
coffee
fingernail
handsome

Need more info?
SCIM – http://simplecloud.info
SCIM PAM Extension (early draft) - https://tinyurl.com/scim-pam-ext
SCIM Core Schema - https://tools.ietf.org/html/rfc7643
SCIM Protocol - https://tools.ietf.org/html/rfc7644

Thank You
@kelly_grizzle
kelly.grizzle@sailpoint.com

When IGA meets PAM ... through their mutual friend SCIM

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to When IGA meets PAM ... through their mutual friend SCIM

Similar to When IGA meets PAM ... through their mutual friend SCIM (20)

Recently uploaded

Recently uploaded (20)

When IGA meets PAM ... through their mutual friend SCIM