Introduction to Identity-as-a-Service and Secure Access to SaaS

1. World®
’16
Introduction to Identity-as-a-Service
and Secure Access to SaaS
Paul Peterson - Advisor Product Management - CA Technologies
SCX06S
SECURITY

2. 2 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
© 2016 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.
The content provided in this CA World 2016 presentation is intended for informational purposes only and does not form any type of
warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.
For Informational Purposes Only
Terms of this Presentation

3. 3 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Abstract
The rise in cloud and mobile apps is impacting organizations of all sizes, changing how
employees work and how IT departments are expected to support the business. Today, business
users can leverage rich capabilities in the cloud to enable better collaboration, speed and
productivity than ever before. The accessibility, ease of use and advances in cloud and mobile
apps introduced immense pressure on IT to deliver modern applications faster, while creating an
exceptional user experience. If IT fails to accommodate the needs of users fast enough, they
simply use the apps they need, often without the knowledge of the IT department. In this
session, you’ll learn how to leverage identity-as-a-service to balance security, agility and user
experience while staying ahead of shadow IT.
Paul
Peterson
CA Technologies
Advisor, Product
Management

4. 4 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Agenda
THE NEW DIGITAL WORKPLACE
CHALLENGES
NEXT GENERATION IDENTITY-AS-A-SERVICE
DEMO
1
2
3
4

5. 5 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Explosion of SaaS Speed Shadow IT
New generation
power users
LOB app
ownership
Application churn
Today’s Digital Workplace

6. 6 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Embracing the Digital Workplace
1. Leverage shadow IT as an opportunity to empower LOB
2. Gain control and visibility over your cloud environment
3. Deliver a consumer grade workforce experience
4. Accelerate digital transformation and cloud adoption
5. Bridge between new and legacy environments
6. Automate identity lifecycle and access management processes
How to Evolve Quickly and Avoid Getting Disrupted

7. 7 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Challenges
Many applications
everywhere
Many identities
everywhere
Multiple access
methods
Constant change Many credentials
No visibility
or control

8. 8 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Finding the Right Balance
Security Agility User Experience

9. 9 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Introducing CA Identity Service
Next Generation Identity-as-a-Service for the Modern Hybrid Enterprise
Accelerate digital transformation while delivering a
secure consumer grade workforce experience
User Provisioning Single Sign-On Identity Lifecycle
Management

10. 10 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
SaaS-First and Hybrid Deployment Models
Leverage Existing On-Premises IAM Investments
Single Sign-on
Authentication
(SaaS-first model)
CA Identity Service
User provisioning and
deprovisioning
Single Sign-on
Rogue and orphan account
detection and remediation
CA Single Sign-On
On-premises apps
SaaS Apps
Active directory
People source
(optional)
Single
Sign-on

11. 11 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
User Provisioning
Deep and Bi-Directional Provisioning Integrations
Automate the provisioning and deprovisioning
of user accounts in your
SaaS apps with business friendly rules
Go deeper to manage the entitlements
(groups, roles, permissions) of your users
Get visibility into existing accounts and
entitlements
Detect and remediate orphan and rogue
accounts
Leverage predefined integrations that
understand the specific requirements of
the target application

12. 12 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Single Sign-On
Unified Launchpad Leverages On-premises Investments
Rich out-of-the-box integrations and a custom
SAML connector enable SSO to hundreds of
applications in minutes
Authenticate users using a strong password
supplemented by two-factor authentication
Reduce help desk overhead with self-service
password management and forgotten
password recovery
Give your users the ease and convenience of
secure Single Sign-On to SaaS and on-
premises apps with the Unified Launchpad
and CA SSO integration

13. 13 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Identity Lifecycle Management
Rule-Based Provisioning and Access Management
Automated rule-based provisioning and
deprovisioning of accounts with
entitlements
Ability to designate an application as the
authoritative people source
Self-service and administrative profile
management
Administrative authorization model
enables delegation of app ownership

14. 14 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Key Benefits
Reduce cloud attack surface with dynamic provisioning and
bidirectional integrations minimizing the risk of over-privileged
and orphan accounts
Improve workforce productivity with a dynamic application
Launchpad and seamless single sign-on across hybrid
environments
Improve business agility and time to value with fast and secure
rollout of cloud applications and rapid integration with on-
premises investments
3
Security
Agility
User
Experience

15. 15 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Key Benefits
Bidirectional integrations simplify account discovery and
reconciliation, and enable orphan account detection and
remediation
A superior user experience makes delegation of app ownership
to business users possible, empowering app owners to onboard
and secure access to apps in minutes
Dynamic integration with CA SSO enables agility and rapid time
to value in enabling a consumer grade workforce experience
3
Security
Agility
User
Experience

16. 16 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Administrator
• Account reconciliation
• SAML Applications
• CA SSO integration
End User
• Launchpad
• Multifactor Authentication
App Owner
• Application onboarding
• Rules
Demo

17. 17 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Recommended Sessions
SESSION # TITLE DATE/TIME
SCX07S Enabling a Hybrid Enterprise Application Launch Pad 11/16/2016 at 04:30PM
SCT42T
Tech Talk: A "Game of Thrones" introduction to identity-
as-a-service
11/17/2016 at 11:30AM
SCT08T Tech Talk: Federate to an SAML-Enabled App in Minutes 11/17/2016 at 12:45PM
SCT43T
Tech Talk: Make life easy for your users with a hybrid
application launchpad
11/17/2016 at 3:45PM

18. 18 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Don’t Miss Our INTERACTIVE
Security Demo Experience!
SNEAK
PEEK!
18 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD

19. 19 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Questions?

20. 20 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
We Want to Hear From You!
§ IT Central is a leading technology review site. CA has them to
help generate product reviews for our Security products.
§ ITCS staff may be at this session now! (look for their shirts). If
you would like to offer a product review, please ask them
after the class, or go by their booth.
Note:
– Only takes 5-7 mins
– You have total control over the review
– It can be anonymous, if required

21. 21 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Thank you.
Stay connected at communities.ca.com

22. 22 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Security
For more information on Security, please visit:
http://cainc.to/EtfYyw