IAM01 - Understanding Identity and Access Management (IAM)

DAY 1: Digital Identity - History, Issues and IGA.

Part 1 - Introduction

• History
• Issues
• Digital identity, global vision
• Vocabulary

Part 2 - IGA: Identity and Authorization Management

• B2E and B2B issues
• Identity Repository: Population and Data Model
• Identity life cycle
• Reconciliation
• Enabling Process: Application for Rights
• Provisioning
• Role models (RBAC, ABAC...) and role mining
• Segregation of duties
• Audit and traceability
• Controls and recertification
• Interactions with other IS components
• Case Studies
• Market vision

DAY 2: Digital Identity - Access and Logical Architecture.

Part 3 - AM: Authentication Management

• Issues
• Identification, authentication and authorization
• Single sign-on: Web and desktop single sign-on
• Identity Federation
• Authentication factors
• Strong authentication
• Adaptive authentication
• Interactions with other IS components
• Case Studies
• Market vision

Part 4 - Architecture

• General principles
• On-premise architecture
• SaaS / Cloud architecture
• Hybrid architecture
• Managed service

DAY 3: Digital Identity - Extension to other domains.

Part 5 - PAM: Privileged Account Management

• Issues
• Access management
• Session management
• Password management
• Interactions with other IS components
• Case Studies
• Market vision

Part 6 - CIAM: Identity and Client Access Management

• B2B and B2C issues
• Consent management
• Customer access management
• Customer data processing
• Interactions with other IS components
• Case Studies
• Market vision

Part 7 - Conclusion

• Digital identity and regulations
• Governance
• Pitfalls to avoid
• Sources of information

INTENDED PUBLIC:

• ISD
• CISO
• Security Engineer
• Design engineer
• Architect