Oracle Entitlement Server - Managing Organisations

Do you require a way to manage Complex Application Entitlements across a range of applications?

1. Oracle Entitlement Server Managing Organizations

2. What are we here for Learn about what OES does How it might be used to solve problems Demo maybe

3. Security Specialized area Brittle security when built in Difficult to change

4. The Problems Managing access to resources Governance Auditing Accommodating changes

5. Identity Management RBAC Authentication and Authorization Latency high response for authorization

6. OES Overview

7. Entitlement Server Features XACML Fine Grain Entitlement Management RBAC ABAC

8. XACML and Database Database auditing can be done with XACML – Note 1375460.1 Database security is not currently available Use database http server to query PEP Database performance???

9. Business Problem Application has rules Rules need to change Are your rules hard coded? Policy engine provides way to support

10. Admin Console CRUD on policy and objects Mapping policies to users Policies Resources Entitlements Roles Applications

11. Roles – Role Categories Roles – User, developer, manager Role Categories are tags

12. Role Hierarchies Set up Role Hierarchies Director -> Manager -> Call Centre Worker Employee -> Payroll Admin -> Accountant Role Mapping – Dynamic Assignment

13. Resources Add resources A resource can be a URL or field on a page A business object – transfer funds Authorization Policy to grant or deny Can the user complete a task Time based access

14. Entitlements Action that can be performed on a resource Uses the legal actions defined in parent resource type Targets – could be more than one resource

15. Policy Has at least one principal – user, role, Ex or app At least one target Grant/deny permissions Conditions

16. Attributes & Functions Used in conditions Attribute can be dynamically assigned a value Evaluated at run time -perhaps location Can be multivalued list Condition builder

17. Condition Builder

18. Administration Delegated administration Application Administration View or manage rights Policy Domains to delegate Allows for delegation to specific areas

19. Questions

20. Bio Peter McLarty Director Turagit Consulting Chameleon DBA, Middleware, Architecture http://www.turagit.com