Why an Agent-based Approach Is Critical for Identity Data Management
When we are working with a client to support a new Cloud or Enterprise system for integration with our IdentityForge suite of products, our first question to clients is usually, “Can we include an agent?”
As a result, I often find myself answering variations of the question, “Why are agent-based approaches so important for identity information matters?”
The reason we feel this is important is that we want to provide real value to our current and future customers. To achieve maximum ROI from their information security investments, we want to provide them with the ability to access data on the target system as close to real-time as possible.
Perhaps the biggest benefit is the ability to call attention to critical access violations that must be addressed immediately. In addition, we want to provide them with as much functionality as possible to manage the target systems. This is not simply an exercise to address an item that needs a check box filled on an RFP; taking an agent-based approach allows us to allow you to derive the full value and funationality from your sizable investment.
For example, let’s take a look at the benefits of leveraging agents in a RACF integration scenario:
Deeper level of integration – supports Alias and Catalog Management, Universal Groups, OOTB support for any custom attribute using configuration, Configurable REXX/JCL integration, and more.
Performance scalability – Handles hundreds of thousands of Account and Entitlement changes quickly & reliably.
Real-Time Audit & Reporting – Captures event data for traceability and access violation data for invalid access attempts to protected resources. A few examples include:
Who made a policy or certification change?
What account was changed?
When was an IP or Application Used?
Data Reliability – Allows for Multi-Master replication, Queue Storage for Mainframe transactional data, and more.
As you can see, even in these limited examples there are a number of benefits that can derived from leveraging Agents. And in our experience, the minimal additional expense and effort.