User access to SAP applications has been handled for the most part on SAP itself, SAP BO GRC AC before Version 10 moved us out of the box and into Java for provisioning, so the focus has been narrow. As IT and GRC requirements for user access become more integrated, there is a need to develop a holistic approach to user provisioning that will not only meet IT requirements (identity access, access controls, etc) but GRC requirements in regards to compliant user provisioning. New trends have a universal approach to user access provisioning that incorporate compliance and they start by enabling and IAM system to provision across the landscape.
The key to developing IAM integrated solutions is to start
small, build a foundation that can be leveraged for growth.
Key Areas for
developing the IAM integrated solution
1.
Vision - Objectives
2.
Governance
3.
Roles and Responsibilities
4.
Process: User Management, Access Controls, and
Audit
5.
Architecture - Current and future state
Developing an IAM solution poses several challenges to the
business in regards to cost, compliance, and constant changes to the business
to align with business objectives.
When choosing an IDM solution an organization must choose
solutions that can manage not only Enterprise Applications such as SAP but 3rd
party applications that can work together.
By integrating an HR system as a base for user identity, and
using and IDM system as the center for all user access on the enterprise, an
organization can realize the following benefits:
1.
Centralized identity management
2.
Centralized User Provision
3.
Centralized Audit and Compliance
4.
Automated Process for Password Reset, User
Approvals, etc.
5.
Reduced cost operating cost
6.
Reduced audit cost.
Let Infosys develop your end to end user access solutions,
by integrating it holistic GRC framework and IT infrastructure experience.
Infosys is uniquely positioned to provide cost-effective,
value added compliance and IT infrastructure consulting services. Infosys
consultants bring a mix of audit, compliance, ERP experience and IT
infrastructure experience from across multiple geographies where organizations
leverage GRC technology. To learn more about Infosys, visit: www.inofsys.com
Continue reading "
Does you GRC User Access Control include IAM?
" »