In this final article in the series, we finalize our countdown of the top 15 features that we look for when evaluating a pure identity management product. Please contact us on info@secidsol.com with any questions or comments that you may have related to the features selected and the order that we put them in.
Starting with number 5 and ascending to the top spot, here are the final five entries:
5. Policy-Driven Identity Management
The ability to leverage policies to ensure that identity data is properly managed greatly reduces the requirement for custom code. Sound data integrity processes reduce risks for downstream systems that use RBAC/ABAC security models.
4. Role (RBAC)/Attribute (ABAC)/Policy-Based Access Control
An enterprise Identity Management platform should provide different types of access control models to secure the user interface and associated services.
3. Self-Service (Registration, Forgotten Password)
Self-service enablement provides a set of tools and services that allow customers to quickly resolve common identity management issues without contacting customer service. User enablement in this way provides an easily quantifiable return on investment by reducing the calls to customer service.
2. Workflow (with escalation and automatic approvals)
A robust and flexible workflow system allows an organization to implement business specific processes for identity management tasks. Organizations can elect to require approvals for requests or automatically approve requests based on data available to the identity management platform. Workflow escalations ensure that approvals are handled in a timely fashion when primary approvers are not available.
- Provisioning
Automated provisioning provides the greatest ROI for an identity management tool. Eliminating human errors during the provisioning process also reduces security exposures. Additionally, users can be quickly deprovisioned, without any human intervention, to ensure former employees and contractors do not have unintended access to critical systems.
As always, we hope that you have found this information useful. If you need IAM assistance, reach out to SIS today and we would be happy to assist you. And subscribe to our newsletter to be notified about the posting of future articles and other SIS news.
