Discuss business intelligence, integration, compliance and a host of other SAP-related topics – implementation, best practices and resources to negotiate the world of SAP better!

« SAP Driven Business Transformation: Cost or Value | Main | Standing at the cross roads of the Business Objects journey-PART I »

Does you GRC User Access Control include IAM?

User access to SAP applications has been handled for the most part on SAP itself, SAP BO GRC AC before Version 10 moved us out of the box and into Java for provisioning, so the focus has been narrow. As IT and GRC requirements for user access become more integrated, there is a need to develop a holistic approach to user provisioning that will not only meet IT requirements (identity access, access controls, etc) but GRC requirements in regards to compliant user provisioning. New trends have a universal approach to user access provisioning that incorporate compliance and they start by enabling and IAM system to provision across the landscape.

The key to developing IAM integrated solutions is to start small, build a foundation that can be leveraged for growth.

Key Areas for developing the IAM integrated solution

1.       Vision - Objectives

2.       Governance

3.       Roles and Responsibilities

4.       Process: User Management, Access Controls, and Audit

5.       Architecture - Current and future state

Developing an IAM solution poses several challenges to the business in regards to cost, compliance, and constant changes to the business to align with business objectives.

When choosing an IDM solution an organization must choose solutions that can manage not only Enterprise Applications such as SAP but 3rd party applications that can work together.

By integrating an HR system as a base for user identity, and using and IDM system as the center for all user access on the enterprise, an organization can realize the following benefits:

1.       Centralized identity management

2.       Centralized User Provision

3.       Centralized Audit  and Compliance

4.       Automated Process for Password Reset, User Approvals, etc.

5.       Reduced cost operating cost

6.       Reduced audit cost.

Let Infosys develop your end to end user access solutions, by integrating it holistic GRC framework and IT infrastructure experience.

Infosys is uniquely positioned to provide cost-effective, value added compliance and IT infrastructure consulting services. Infosys consultants bring a mix of audit, compliance, ERP experience and IT infrastructure experience from across multiple geographies where organizations leverage GRC technology. To learn more about Infosys, visit: www.inofsys.com


TrackBack

TrackBack URL for this entry:
http://www.infosysblogs.com/apps/mt-tb.cgi/4578

Comments

Hi,

The blog theme is awesome.

Many thanks,

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

Please key in the two words you see in the box to validate your identity as an authentic user and reduce spam.

Subscribe to this blog's feed

Follow us on

Blogger Profiles

Infosys on Twitter