Automated User Provisioning

ActiveRoles Quick Connect: An Add-On Application for ActiveRoles Server

Quick Connect automates and simplifies enterprise-wide user provisioning.

Imagine user and e-mail accounts, home folders, security and distribution lists, application access, etc… all being set-up or removed automatically based on your authoritative employee data typically found in your HR system! Quick Connect automates the creation and set-up of multiple accounts as well as the deprovisioning of user accounts without the need for IT administration resources. Changes in the authoritative data source such as for new hires, promotions, transfers or terminations are automatically handled throughout Active Directory and across your network. This saves administrative cost by allowing those who would have been involved in a manual provisioning process to focus on other tasks.

Quick and Simple: The Scheduled Import Wizard
Before a decision has been made to deploy a larger Identity Management Solution such as Microsoft's Identity Lifecycle Manager 2007 (ILM formerly MIIS), the Scheduled Import Wizard allows you to connect one or more employee data sources to ActiveRoles Server for automated user provisioning. This simple to use solution allows you to create a one-way scheduled import of employee data from text file, LDAP or ODBC data sources and feed it directly into ActiveRoles Server where AutoProvision policies will create user accounts and assign entitlements like mailboxes, home folders, group memberships, and access privileges. There are only nine steps required for configuration and each step guides you through the process with a simple to use wizard. After each step a test-as-you-go feature allows you to check your progress ensuring you make no mistakes. Now instead spending months and large amounts on consulting fees configuring and coding, you can automate Active Directory user provisioning in a matter of days!

Codeless User Provisioning for ILM 2007 (MIIS)
Separate from the Scheduled Import Wizard are the components necessary to connect ILM 2007/MIIS to ActiveRoles Server. By integrating the two applications, ILM 2007/MIIS can take advantage of the AutoProvision policies of ActiveRoles Server and achieve codeless provisioning for Active Directory! Now ILM 2007/MIIS can create users and assign entitlements like mailboxes, home folders, group memberships, and access privileges without programming. With codeless provisioning - the high costs, the high level of knowledge and the ongoing maintenance of ILM 2007/MIIS custom code are virtually eliminated.

Selective and Self Service Provisioning for ILM 2007 (MIIS)
The cost of an ILM 2007/MIIS deployment is further reduced by leveraging the extensible web interfaces that come with ActiveRoles Server. The Administrative Web Interface can be used to create a single console for managing not only the user’s identity in Active Directory but also the selective provisioning of that identity enterprise-wide. With the click of a check-box, you can now control provisioning through ILM 2007/MIIS to connected systems such as AD LDS/ADAM, Microsoft SQL, SunOne™, Lotus Notes™ or Oracle™. Also provided is a self-service web interface for users to add and maintain personal data (cell numbers, home e-mails, addresses, etc…). That information can then be selectively propagated throughout systems connected to ILM 2007/MIIS, thus eliminating IT involvement and manual errors while keeping data consistent throughout all enterprise systems.

A Complete Solution
Because ActiveRoles Server can also be the primary Active Directory Administration solution both IT administrators and ILM 2007/MIIS leverage the same ActiveRoles Server AutoProvision policies and data integrity rules. Quick Connect ILM 2007/MIIS Integration simplifies your enterprise IT management by allowing you to maintain one set of rules and one management console for enterprise wide cross-platform provisioning.

Compliance with Regulatory Laws and Best Practices
Many legal or regulatory compliance laws require a documented and enforceable process for providing access to computer resources. Without Quick Connect for ActiveRoles Server, numerous manual processes must be documented and verified, consuming thousands of man hours to complete and are still prone to human error. We can automate and impose a consistent process for granting and denying access to company resources. If audited, you can produce reports showing access privileges, process flows, business logic, rules enforcement procedures, configuration and change controls for your IT systems. Not only do you save time and resources but better yet you have a consistent corporate structure to mitigate risk while improving IT resource efficiency and productivity.

Quick Connect for ActiveRoles Server keeps account access decisions in the hands of a few qualified staff by creating centralized roles, rules and access policies once. Limit risk by controlling the number of IT staff with authority to change and modify roles, rules, policies and processes.

Benefits

• Improves business efficiency, productivity and lowers administrative costs by eliminating redundant and manual data entry and freeing IT resources

• Enhances security, automatically provisions, reprovisions, and deprovisions users in a matter of minutes not days

• Simplifies compliance of regulatory requirements by providing a documented and enforced process for providing access to corporate resources enterprise-wide that aligns with best practices

• Improves user productivity, reducing time required to provision user accounts

• Decrease the total cost of ownership of Active Directory and ILM 2007/MIIS deployments, by making them easier to use and cheaper to maintain with codeless provisioning and centralized management of configuration and change controls

Sample Screen Shots