Information Technology Reference
In-Depth Information
spent tens of millions of dollars on IAM without even achieving Single Sign-
On capability!
And no heads rolled.
It doesn't have to be that way. This document is meant to cut a lot of time,
expense and suffering out of your IAM journey. It won't give you the political
will or the thick skin, of course. That's your stuff. What it will do is show you
how simple IAM really is. The architecture we describe here can quite
literally save you millions of dollars, if you can just get your organisation
around to implementing it.
The following diagram shows you the basic functions of IAM at a glance
4
,
and the subsequent sections will gradually provide more detail, so as to ease
you into this really simple way of approaching IAM. (Confidentiality
agreements with employers past and present prevent us f rom sharing
specific design details and code from our experience, but principles, patterns
and tips are as free as the air we breathe, and as precious.)
We hope our experience will benefit you in your own journey. Good luck!
4
Also see Appendix B for a more formal model of Identity and Access Management.
