CON8808 Amit Jasuja's Identity Management presentation at OpenWorld 2013

1. 1Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

2. 2
CON8808: Enabling Business Growth
in The New Economy
Sept 23rd 2013
Amit Jasuja
Senior Vice President
Identity Management & Security, Oracle

3. 3Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
SECURE MOBILE ACCESS
REQUEST AND SECURE
ACCESS TO A MOBILE
DEVICE, EVEN IF IT’S NOT
YOURS

4. 4Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
HOW WE DID IT

5. 5Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Access SSO Portal via Safari
iPad SSO
Portal
Access
portal &
enter
credentials
Oracle Access
Management
Download & Install Secure Container
Secure Container
Application
ACQUIRE SECURE
CONTAINER APPLICATION
Validate
Credentials
Click to
Download
Container

6. 6Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
ENTERING
THE ONE TIME
PASSWORD
Unknown Device Detected
iPad
Step up authentication required
iPhone Fraud Detection
Enter
User
Credentials
Click to
Generate
Soft Token
Generate
Soft Token
(OTP)
Device
Registered &
Container
Secured
Identity Management
for Mobile
Enter
Soft Token

7. 7Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
ACCESSING CORPORATE
APPLICATIONS AND DATA
Secure Access
(Oracle MAM)
Corporate
Fileshare
iPad
File view: allowed
Travel App
White
Pages
STOP
File save: denied
(Oracle MAM Policy)
Simple
SSO
Cloud
SSO
Kerberos
AuthN with
AD

8. 8Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
SINEESH KESHAV
VP OF APPLICATION DEVELOPMENT
SAFEWAY, INC.

9. 9Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
SECURE PRIVILEGED ACCESS
PUTTING THE PROPER
CONROLS IN PLACE
REDUCES YOUR RISK

10. 10Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
HOW WE DID IT
AGAIN

11. 11Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
REQUESTING
PRIVILEGED
ACCESS
Demo
Laptop
Demo
Server
Oracle
Identity
Governance
Session
Manager
Request Privileged Access to Demo Server
Approval via
smartphone
Approval workflow

12. 12Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
EXECUTING
PRIVILEGED
COMMANDS
Demo
Laptop
Demo
Server
Oracle
Identity
Governance
Session
Manager
Sending startup command
Command executed on
Demo Server
Command
recorded in
Session Log

13. 13Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
REVIEWING THE
PRIVILEGED
ACCESS
Demo
Laptop
Oracle
Identity
Governance
Session
Manager
Access checkout history report
Session Logs

14. 14Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
COMPLETE IDENTITY GOVERNANCE
UNIFIED SOLUTION FOR
CERTIFICATION OF USER
AND DATA ACCESS

15. 15Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
HOW WE DID IT
AGAIN

16. 16Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Laptop
Log into Identity Governance Console
APPS
Content
Repository
APPSAPPSAPPS
Common Data Model
-- Users
-- Roles
-- Entitlements
-- Data
CERTIFYING
ACCESS
- Review file metadata (sensitivity,
content classification)
- Review direct reports access privileges to
highly sensitive document
- Review direct reports access history

17. 17Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
DOM FEDRONIC
SR. BUSINESS LEADER IDENTITY & ACCESS
VISA

18. 18Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
COMPLETE IDENTITY MANAGEMENT
SIMPLIFIED IDENTITY
GOVERNANCE
INTEGRATED PLATFORM
COMPLETE ACCESS
MANAGEMENT
With self service for
regular and
privileged accounts
Supporting mobile,
social and cloud
Rationalized
architecture for
scalability and security

19. Copyright © 2013, Oracle and/or its affiliates. All rights reserved.19
Worldwide Adoption
900+ 50+ 100M+ 1.5M+
DEPLOYMENTS
ON 11g R2
PARTNERS
TRAINED
IDENTITIES
MANAGED
MOBILE
DEVICES

20. 20Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
TRANSFORMING THE BUSINESS
SECURELY USE ANY DEVICE
PROFILE BASED ACCESS
AUTOMATION FOR SPEED AND SECURITY
MONITORING FOR CONTROL

21. 21Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Oracle Fusion Middleware
Business Innovation Platform for the Enterprise and Cloud
 Complete and Integrated
 Best-in-class
 Open standards
 On-premise and Cloud
 Foundation for Oracle Fusion
Applications and Oracle Cloud
User Engagement
Identity Management
Business Process
Management
Content
Management
Business
Intelligence
Service Integration Data Integration
Development
Tools
Cloud Application
Foundation
Enterprise
Management
Web Social Mobile

22. 22Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Innovation Awards
Lam Research Theater (Next to Moscone North)
Session ID: CON8082
Session Title: Oracle Fusion Middleware: Meet This
Year’s Most Impressive Innovators
Venue / Room: YBCA - Lam Research Theater
Date and Time: Monday Sep 23, 4:45 - 5:45 p.m.
18 Winners Across Eight Categories

23. 23Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
GET MORE INFORMATION AT OUR SESSIONS
Context- and Risk-Aware Access Control: Any Device Anywhere
Manish Gulati, MITRE, Ranjan Jain, Cisco Systems Inc
Ashish Kolli, Oracle, Svetlana Kolomeyskaya, Oracle
Monday 4:45 PM - 5:45 PM Moscone West - 2018 CON8819
Securely Enabling Mobile Access for Business Transformation
Verizon Wireless, Ministry of National Education
Lee Howarth, Oracle, Ajay Sondhi, Oracle
Tuesday 12:00 PM - 1:00 PM Moscone West - 2018 CON8896
Securing Privileged Accounts with an Integrated Identity Management
Solution
Michael Laramie, Oracle, Olaf Stullich, Oracle, James Taylor, Oracle
Wednesday 3:30 PM - 4:30 PM Moscone West - 2018 CON8813

24. 24Copyright © 2013, Oracle and/or its affiliates. All rights reserved.