Presentation to the Utah Architecture Review Board on Single Sign-On and the Utah Master Directory

1. TA Review – Authentication and Single Sign-On Utah Department of Technology Services March 2008

2. Introduction The Utah Master Directory (UMD) and related SiteMinder architecture was designed in 2001. There is a need to validate current practices against best practice industry solutions with an objective of wider adoption of the Single Sign-On (SSO) and related directory and access control infrastructure.

3. Types of Single Sign-on

4. Identity Access Mgmt Ecosystem

9. Help Desk Call Data for Password Resets and UMD Related Inquiries Industry Average is abt 30% - IT Security Journal 8.6% 8.7% 9.1% 8.8% 8.7% 7.6% % PW Resets 6,813 7,604 19,089 19,342 18,240 17,812 Total Tickets 588 662 1746 1708 1585 1354 Total 242 264 624 594 618 484 UMD PW Reset 101 147 382 421 380 385 Mainframe PW Reset 245 251 740 693 587 485 Network/LAN PW Reset Feb ‘08 Jan ‘08 4 th Q ‘07 3 rd Q ‘07 2 nd Q ‘07 1 st Q ‘07

11. Industry Reports Forrester Gartner

12. Extending Enterprise ID Across the Web

13. Federal E-Authentication The E-Authentication Solution created the US E-Authentication Identity Federation which allows Federation members to recognize and trust log-in IDs that are issued by other trusted Federation members. The trusted members that issue these log-in IDs may be other government agencies, academic institutions, or commercial entities, such as banks or other financial services institutions. There is opportunity for Utah to participate in this initiative by establishing the UMD as a trusted entity.