This article can also be found in the Premium Editorial Download "Information Security magazine: Compliance vs. security: Prevent an either-or mentality."
Download it now to read this article plus other related content.
Sun Java System Identity Manager 7.0
REVIEWED BY BRAD CAUSEY
Price: $50 per user
Sun Microsytems' latest ID management solution unifies its user provisioning and auditing products, providing an impressive level of integration and functionality in a single package. Sun Java System Identity Manager 7.0 is a complete solution that allows an enterprise to use a single console for a multitude of ID management tasks, including role delegation, password synchronization, automated provisioning and compliance auditing.
User data sources are added via agentless connectors. Among the supported sources, which Sun calls resources, are RSA products, BlackBerry Enterprise Server, Remedy, PeopleSoft, Siebel and all database servers. Supported resources can be added in a few simple steps, and others can be accessed through generic connectors, or custom built through the API. Sun has integrated SPML to allow for nearly any type of integration, including Web applications, which generally present a huge challenge because of their distributed nature.
Most of the common primary identity stores, such as Active Directory, require that at least one Sun Identity Manager Gateway be installed. The Gateways make Identity Manager very scalable; you add as many Gateway servers as you need.
Delegation of duties reduces cumbersome management overhead.
Reports can be scheduled, cloned, downloaded or emailed in PDF or CSV format, or viewed in real time in a custom-built dashboard.
Testing methodology: Our lab included two Active Directory domains and one OpenLDAP tree. User accounts were enumerated from various sources, including MySQL and SQL Server, Web applications, and various client-server applications. User roles such as administrators, power users and end users were created to test access controls.
This was first published in March 2007