Standard solution or custom-made? Both!
Every corporate IT infrastructure has grown individually and is unique. In order to keep IAM projects lean, KOGIT endeavors to use the standard functions in the software products and extends these as required by customizing and/or own add-ons and plug-ins in order to adapt them to the individual system requirements of our customers.
With our SailPoint certified plugins SoD-Matrix, IIQ History Plugin, SAP Om Importer Plugin and Role Analytics Plugin we offer our customers additional functions that can be seamlessly integrated into SailPoint IdentityIQ. Furthermore, we offer the two AdOns SailPoint Tester and SP2Doc to SailPoint IdentityIQ customers.
Segregation of Duties Matrix for SailPoint IdentityIQ
The SoD Matrix Plugin complements SailPoint IdentityIQ with a graphical interface to maintain and visualize the segregation of duties (SoD).
The clear representation in the SoD-Matrix is ideal for mapping the personal separation of functions on the IT level. Conflicts, borderline cases and permitted combinations are marked according to a traffic light principle and thus optimally prepared for audits. Data maintenance is carried out in a time-saving manner by mouse click.
KOGIT IIQ History Plugin
SailPoint IdentityIQ tells you where sensitive data is and who is allowed to access it. With the IIQ History Plugin you can see where your data was stored and who had access to it. The KOGIT plugin complements IdentityIQ with an efficient archiving option for identities, roles and access rights. The clear representation of the historical data enables a fast search based on parameters, characteristics and the authorization status at a certain point in time.
KOGIT Role Analytics Plugin
The KOGIT Role Analytics Plugin simplifies navigation between different tasks in IIQ.
The plugin provides a user-friendly way for users to view identities, roles and permissions and their corresponding relationships. Daily tasks can be easily zoomed in and out, and the plugin’s search and display functionality is complemented by a role dashboard that highlights important KPI’s of role and permission status and usage.
Datatransfer from SAP to SailPoint IdentityIQ
The KOGIT SAP OM Plugin allows users to load data from SAP OM to better support a number of IAM scenarios. Some of these include:
- Vacant manager position,
- Automatic roll creation,
- Automatic role assignments with a transition period,
- Improve mover processes and
- Simulating organizational changes.
The interface from IdentityIQ to a SIEM
The SIEM Plugin is an essential building block of the architecture for secure identity access management that integrates IAM, PAM and SIEM solutions.
To deliver log data (AuditEvents) from IdentityIQ to a SIEM requires an interface. The Advantages:
- A plugin for exporting syslog events in Common Event Format (CEF)
- The task only needs the IP address and the port of the SIEM/Syslog receiver
- The task regularly exports all configured AuditEvents from IdentityIQ to the defined address
Simple documentation with SailPoint2Doc
With the SailPoint2Doc AddOn from KOGIT, customer-specific adaptations to SailPoint installations can be displayed in a clear form, easily and without system access. Project managers, consultants and developers receive an interactive documentation of the complete workflows at the push of a button. This reduces the amount of training required for new project staff. SailPoint2Doc shows an interactive summary of the most important parameters of the adjustments instead of the code of the XML files and visualizes all connections between the objects – thus the result is also well readable and understandable for project members who are lacking the detailed technical knowledge of SailPoint products. While manually created documentation quickly becomes obsolete, SailPoint2Doc offers the advantage of the created documentation always being up-to-date.
Automated tests for SailPoint IdentityIQ workflows and rules
The efficient testing of project-specific adaptations for SailPoint IdentityIQ is an essential component in the quality assurance of every implementation project. The SailPointTester is a Java-based add-on that allows automatic (Junit-)tests of rules, workflows, email templates and much more, which integrate seamlessly into the development process. With the SailPointTester, rules or individual workflow steps can be executed locally in the development environment without connection to a database and the results verified. For more extensive tests, the SailPointTester supports offline mode as well as tests against a real IdentityIQ database. A must for every complex implementation project.
