Tag Archives: IAM Project

The new Identity & Access Management solution is going live soon

What is happening?

The Identity & Access Management Programme (IAM Programme) is replacing the aging and unsupported back end solution of the current IDMS system.

IAM Project
IAM Project
When is it happening?

The new IAM platform will go live on the weekend of the 23 & 24 November, replacing the current solution.

Who is impacted?

Staff, visitors and students are impacted. Visit the IAM Project Intranet site (staff access only) to see in detail what is changing for each group.

A new password tool is coming!password_tool_iam

Existing staff, visitors and students will use the new password tool to change their password:

  • The new password tool will be accessible via the ITS Website and users will be re-directed to an external site with a url name of okta.com
  • Existing staff can login with their current user code and password and need to enter the following:
    • a second personal email address (not shared with other systems),
    • a mobile phone number
    • and choose a security image
  • New staff, student and visitors will be send a welcome email to their nominated private email address with a link to the new password tool (okta.com) to set a password. They have to enter the same details as above.

Note: Mobile phone number in the new password tool are not shared with anyone or any other systems. They are only held for the purpose of a 2nd authentication factor (i.e. text message code).

Benefits of the new  IAM solution are:

Providing single sign on capability – sign on once for multiple IT applications,

Faster provisioning of default access for new staff, visitors and students,

Enhancing Self-Service – new Assyst tiles for requesting additional access to resources,

The ability to streamline Access Management Services – get access to systems more easily with automation, which can be enhanced in future,

Better protecting identity and access information while the user experience is ensured,

More quickly synchronising password changes with downstream systems,

The solution is adaptable and can grow with the needs of UC,

Integrating new IT systems more easily

If you have any questions regarding the IAM Programme, please do not hesitate to email us at identityproject@canterbury.ac.nz.

Ngā mihi nui

The IAM Project Team


See previous IAM related communication:

What is changing for Department/School Administrators? – IAM Project Update

What is changing for Department/School Administrators, Notification Recipients, and Access Arrangers?

IAM Project
IAM Project

The Identity & Access Management Programme (IAM Programme) is replacing the aging and unsupported back end solution of the current IDMS system with the aim to modernise and future proof the IAM solution within UC.

Visit the IAM Project Intranet site (staff access only) to see what is changing for each group.

By the end of this year a new IAM platform will be implemented, replacing the current solution.

The following changes will be made due to the implementation of the new platform, that will impact Department/School Administrators, Notification Recipients (previously known as IdMS Recipients), and Access Arrangers?

Password
  • Notification recipients will no longer receive initial passwords for new staff and visitors. The password will be directly sent to new staff/visitors nominated email address. If no email address is available the information if flagged with the IT Service Desk. Note: The email confirmation to notification recipients with user code and list of default resources will remain.
  • A new password tool will be implemented (one password tool for everyone where to change your password). Note: Jade SMS and Oracle Financials are not affected at this stage.
Visitors
  • A new Visitor Database (behind the scenes) will be implemented.
  • New visitor records will no longer be entered into UCPeople/PeopleSoft.
  • The Service Request for Visitors (SharePoint form) (UC staff access only) will be integrated to the new visitor database.
  • Visitor Process ownership will change from HR to ITS.
  • Visitors will no longer automatically receive Skype for Business and a Skype for Business phone number. If one is required, it can be requested via Assyst/IT Service Desk.
Provisioning & De-provisioning
  • Automatic provisioning of automatically assigned resources (for new staff, students and visitors).
  • IT account will be disabled midnight of last day of employment/visit.
  • UC Data will be removed – + 30 days after contract/visit end date, + 90 days for students.
  • Identity will be kept for life.
  • New Assyst tile for requesting additional access to resources (e.g. all Staff Mailing Distribution List, additional Network /Drive access etc.).
Other
  • Multi-Factor Authentication (MFA) capability will be enabled.
  • Single sign on capability for multiple IT applications will be enabled.

If you have any questions regarding the IAM Programme, please do not hesitate to email us at identityproject@canterbury.ac.nz.

Ngā mihi nui

The IAM Project Team


See previous IAM related communication:

Identity and Access Management Project

A new back-end solution is coming soon!

IAM Project
IAM Project

The Identity & Access Management Programme (IAM Programme) is replacing the aging and unsupported back end solution of the current IDMS system with the aim to modernise and future proof the IAM solution within UC.

For further details about the project refer to the IAM Project Intranet site (staff access only) or contact the project team directly.

Some examples where the new solution will make a difference:

New IT Systems will be easier be integrated.

Provisioning of standard/default access for staff, students and visitors will be faster.

Re-setting your password will be easier and quicker.

The project is currently finalising the development of the platform for the new IAM solution (‘the plumbing in the background’).

The initial platform capability will be in place by the end of October 19.

We are anticipating minimal disruption and impact on staff,  students and visitors across UC.

Further details of what is coming and what this means for staff, students and visitors will be shortly communicated via:

Ngā mihi nui

The IAM Project Team

 


See previous IAM related communications:

IAM Programme Update – IAM Resource Owners Group

The Identity and Access Management (IAM) Programme is making great progress and on track  to go live by the end of 2019.

The IAM  Project will be delivering not only identity and access functionality, with its associated provisioning/de-provisioning, but also providing a platform with the capability to expand and extend our existing services and offerings. Enabling us to work seamlessly with modern cloud services.

The IAM Project has established an IAM Resource Owners Group. Staff across UC who are owners of business resources related to the IAM project (e.g. owner of shared mailboxes, software applications, etc.)  have been identified and invited.

An IAM ‘resource owner’ is a person that is responsible for the resource and who authorises access to the resource. In some, but not all cases, they may also be the person who gives access to the resource.

The first kick off meeting took place on Monday, 13th May and was led by Paul O’Flaherty the IAM Programme Sponsor.

View the video recording of the session here.

Please refer to the IAM Resource Owners Group site for more detailed information about the purpose of the group, who is involved and frequency of the meetings.

The project has now established the additional two groups across the University:

Please refer to each individual sites for a list of people who are involved in those groups. In some instances there may be an overlap and some staff have been identified as a Resource Owner and a IAM Business Champion.

If you have any questions regarding the IAM Programme, please do not hesitate to email us at  identityproject@canterbury.ac.nz.

Paul O’Flaherty     
SMT Lead for the IAM Programme
Executive Director – Human Resources | Kaihautū Matua Pūmanawa Tangata

 

See previous IAM related communications:

Identity and Access Management Programme Updates

The Identity and Access Management (IAM) programme has selected a technical solution/vendor and is entering the next phase of the IAM project.

What is the IAM project about again?

The overall aim of the programme is to modernise and future proof the IAM (Identity and Access Management) solution within UC.

UC has a set of aging, and in parts unsupported, group of systems providing Identity and Access Management (IAM) that needs replacing.

The new IAM solution will provide students, staff and visitors the right access to resources at the right time and will improve the user experience overall. It aims to make Identity and Access Management almost invisible (i.e. it is just there and most people don’t have to think about it).

Watch this short IAM video (MP4, 19 KB, 2.40 minutes) (intranet, staff access only) to see:

  • what the IAM project is about (high level)
  • what is changing (high level),
  • why we are changing now/ upgrading now.

What is currently happening?

For the IAM solution to be successfully embedded across UC, it is important to have input from as many departments as possible.

The IAM Business Champion Group has been set up and met the first time beginning of April.

The group has been established to provide input across the University and will meet regularly during this year.

For further details on the purpose of the group, who is participating, what is happening and a video recording of the first session, refer to the IAM Business Champion Group (intranet, staff access only).

If you would like to contribute to the IAM Business Champion Group, feel free to get in touch with us here>

For further information on the project refer to the IAM Project Intranet site (intranet, staff access only) or contact the project team>

Paul O’Flaherty                                      
SMT Lead for the IAM Programme
Executive Director – Human Resources | Kaihautū Matua Pūmanawa Tangata

 

See previous IAM related communications: