Access certification

Access certification is integral to Hitachi ID Identity Manager:

Process:

  • Scheduled and ad-hoc.
  • Event triggered (e.g., via transfer).
  • Controlled scope.

Review:

  • Subordinates per manager.
  • Entitlements per user.
  • Users per entitlement.

Certify:

  • Employment, subordinate/manager relationship.
  • Continued relevance of entitlements.

Remediate:

  • Terminate or transfer users.
  • Deactivate roles, login IDs, group memberships.

Workflow:

  • To invite certifiers.
  • Reminder e-mails, escalation, delegation.

Access controls:

  • Who can certify whom?
  • Who can manage the process?
  • What identity data can be displayed?

Reports and dashboards:

  • Coverage.
  • Progress.
  • Changes on target systems during review.

Analytics:

  • Who has what (incl. history).
  • Compare users, roles, entitlements.
  • Effective role assignment.
  • SoD violations, orphan/dormant accts.