Ah, good ol AD, setting up passwords/reseting passwords. Setting folders....
A BaD blog with no BaD puns
|
 On 02/03/2016 at 07:17 PM by mothman See More From This User » |
Doh!
As many of you know I started a brand new job doing brand old things at the beginning of January.
Well Identity Management has become much more complex over the last 5 years. At its most basic it goes like this. You have a system running Microsoft's Active Directory, you have another one running an HR Database and maybe several others all requiring user setup for credentials and access to applications/information.
In a world without an IDM solution, when a new user is hired they have to be created and set up in the HR system then someone has to create them in Active Directory, then they need to be created in the email system and so on. This can mean it takes ages to on-board a user with all the credentials and access they require and when they leave it all has to be stopped manually in every system.
IDM means that a user is created once and based on requirements and role they get created in all the places they need to be pretty much instantly. Likewise when they leave, terminating them in the Identity vault removes their access to anything and everything in one fell swoop. No muss no fuss.,
At that level it sounds pretty simple but there's so much involved in getting all those systems to talk to each other and understand each others language.
My job is keeping all that running and troubleshooting when it doesn't work as designed.
I hope I explained that properly. There's a lot more to it these days but I won't get into that right now.
Here's me in the morning
Here's me after a long day, like Monday when I worked from 8:00 AM to 8:00 PM
Panda on dudes!
Comments