As enterprises launch their digital transformation strategies, it is essential to implement secure, compliant, appropriate, yet convenient identity and access management (IAM). IAM ensures that the right individuals access the right resources at the right times, and for the right reasons. This slide deck covers why IAM is crucial in digital transformation.

1. Director - Solutions Architecture, WSO2
IAM: Catalyst For Digital Transformation
Dimuthu Leelarathne

2. Digital Transformation at ABC Bank

3. Identity & Access
Management (IAM)

4. Right Individuals Access Right Resources
at Right Time for Right Reasons

5. • Authentication
• Authorization
• Identity federation
• Provisioning
• Account management
• Identity governance
Identity & Access Management

6. Digital Transformation

7. Make Business Different Through
Technology

10. • Customer experience
• Operational process
• Business models
Digital Transformation

11. Dissecting IAM in Digital
Transformation

12. Customer Focused Digital
Transformation

13. • Better customer onboarding
• Simpler and seamless interaction
– Social logins, mobile connect, Google reCAPTCHA
• Misuse/breaches of customer identity data ->
devastating results!
• Compliance adherence
• Scalability
Challenges for Customer IAM System

14. • Insurance agents sell insurance, record
customer data
• Customers must register online to pay
premiums
• Customer provides minimal data to register
– Rest of the data fetched from the CRM
Easy Registration Using Existing Data
A Multinational Insurance Provider, USA

15. Solution
Web Server
Registration
WSO2 IS
Handler
User DB
API Calls

16. • When registration
– Login using Facebook
– Provide additional details
• Multi-factor authentication or internal
credential for transactions
Social Logins
A Multinational Energy Provider, Europe

17. Solution
Web Server
Login Module
WSO2 IS
OAuth 2.0
User DB Y User DB X
User DB X
OAuth 2.0

18. • Allows to login to applications using mobile
phone
• 20 million active users in India
• Any application developer can utilize mobile
connect to provide easy authentication
Mobile Connect Platform
6 Top Mobile Network Operators in India

19. Solution
Application
Service Provider
WSO2 IS
USSD
SMS+URL
SIM/Applet
API Exchange
OpenID Connect

20. • Reduce entry barrier to the digital transform
program (competitive advantage)
• Security, compliance and monitoring
• Identity governance -> new business models
• Address technical challenges
– Awesome UX!
– Scalability
Quality of Your CIAM

21. Digitally Transforming
Processes

22. • Automating processes
– Applications
– Processes
• Exposing internalexternal APIs
• Using digital communication
• Dashboards and digital access to information
• Evolving digital vision
Digital Operation Processes
Example Scenarios

23. • Integrate with enterprise IAM
• Expand into federation silos
• Acquisition, mergers, and partnerships
• BYOD - bring your own device
Challenges for the IAM System

24. • Manage identity for staff and students to access
internal applications
• Multiple Identities and federation silos
• SSO across over heterogeneous protocols for
SaaS, cloud and onprem apps
• Automatic provisioning and easy management of
identities
Identity Broker
University of Foo, USA

25. Solution
SIMS EDM
Learning
Management
System
WSO2 IS
ServiceNow
Workday
LDAP
ServiceNow
SSO over - SAML,
OAuth2.0 and etc

26. • An organization with 100 of applications
• Overcoming application silos
• The solution
– Partitioned user spaces that can be automatically
provisioned
– Automatically populates the enterprise LDAP
Unified Application Portfolio
A Multinational Laboratory System - Bar, USA

27. Solution
Domain A
App-P App-Q
Users - A
App-R
App-X App-Y
Users - B
App-Z
Domain B
App-P App-Q
App-X App-R
App-Z App-Y
WSO2 IS Custom
User Store
Users - BUsers - A
Primary
User DB

28. • Application portfolio for hundreds of partners
• Each partner has a user space
• Partner administrator provisioned (workflow)
• Partner administrator and business unit
managers
– Manages identity
– Defines access control
Digital Partner Management
A Multinational IT Hardware Manufacturer - Baz, USA

29. Solution
App-P App-Q
App-RApp-X
WSO2 IS
Partner
Registration App
Partner
User DB
SSO for
Partners
Partner program
Manager

30. Identity Management Maturity Levels
Defined by Forrester
0 - Nonexistent No identity management ( e.g. data kept in spreadsheets)
1 - Ad hoc IAM not planned. Some applications require authentication. On
case-by-case, users manually provisioned, use different usernames
2 - Repeatable Intuitive, not documented, but occurs when necessary
3 - Defined Documented and predictable. IAM is maintained from a checklist
4 - Measured Well managed and automated. User gets automatically provisioned
once HR record is created and provisioned when removed
5 - Optimized Continuous, integrated, and proactive. Analytics available

31. • Reduce entry barrier to the new process
• Productivity, security, governance, compliance,
monitoring and visibility -> innovation, reduce
risk
• Overcome technical challenges
– Penetrate into federation silos
– Acquisition, mergers, and partnerships
Quality of your EIAM

32. New Business Models

33. • Radically shifting what you sell, how you sell,
and make money
– Reinvent
– Redefine
• Could require an extensible IAM system
IAM for Business Models

34. Quality of Your
IAM System
Success of Digital
Transformation

35. wso2.com
35