{"id":10532,"date":"2017-09-04T08:48:18","date_gmt":"2017-09-04T06:48:18","guid":{"rendered":"https:\/\/dev.kogit.de\/loesungen\/kogit-iam-loesungen\/"},"modified":"2023-02-13T15:25:03","modified_gmt":"2023-02-13T14:25:03","slug":"kogit-iam-solutions","status":"publish","type":"page","link":"https:\/\/www.kogit.de\/en\/performances\/kogit-iam-solutions\/","title":{"rendered":"KOGIT IAM-Solutions"},"content":{"rendered":"

[vc_row top=”0px” bottom=”0px”][vc_column][vc_raw_html]JTNDc3R5bGUlM0UlMEEucGFnZS1oZWFkZXIlMjAlN0IlMEElMjAlMjAlMjAlMjBiYWNrZ3JvdW5kJTNBJTIwdXJsJTI4aHR0cHMlM0ElMkYlMkZ3d3cua29naXQuZGUlMkZ3cC1jb250ZW50JTJGdXBsb2FkcyUyRkJhbm5lciUyRktPR0lUX0xvZXN1bmdlbi5qcGclMjklMjBsZWZ0JTIwdG9wJTNCJTIwYmFja2dyb3VuZC1yZXBlYXQlM0ElMjBuby1yZXBlYXQlM0IlMjBiYWNrZ3JvdW5kLXNpemUlM0Fjb3ZlciUwQSU3RCUwQSUzQyUyRnN0eWxlJTNFJTBB[\/vc_raw_html][\/vc_column][\/vc_row][vc_row top=”40px” bottom=”20px”][vc_column][vc_heading subtitle=”Standard solution or custom-made? Both!” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][\/vc_column][\/vc_row][vc_row content_placement=”middle” el_class=”plugin-intro”][vc_column width=”1\/5″][vc_single_image image=”12471″ img_size=”full” el_class=”plugin”][vc_button title=”Plugin Information” button_width=”btn_fw” type=”fontawesome” icon_fontawesome=”fas fa-info” button_style=”minimal_style” color=”btn_orange” link=”url:%23SoD” el_class=”plugin-btn”][\/vc_column][vc_column width=”1\/5″][vc_single_image image=”10378″ img_size=”full” el_class=”plugin”][vc_button title=”Plugin Information” button_width=”btn_fw” type=”fontawesome” icon_fontawesome=”fas fa-info” button_style=”minimal_style” color=”btn_orange” link=”url:%23History” el_class=”plugin-btn”][\/vc_column][vc_column width=”1\/5″][vc_single_image image=”12467″ img_size=”full” el_class=”plugin”][vc_button title=”Plugin Information” button_width=”btn_fw” type=”fontawesome” icon_fontawesome=”fas fa-info” button_style=”minimal_style” color=”btn_orange” link=”url:%23Analytics” el_class=”plugin-btn”][\/vc_column][vc_column width=”1\/5″][vc_single_image image=”12465″ img_size=”full” el_class=”plugin”][vc_button title=”Plugin Information” button_width=”btn_fw” type=”fontawesome” icon_fontawesome=”fas fa-info” button_style=”minimal_style” color=”btn_orange” link=”url:%23SAP” el_class=”plugin-btn”][\/vc_column][vc_column width=”1\/5″][vc_single_image image=”13856″ img_size=”full” el_class=”plugin”][vc_button title=”Plugin Information” button_width=”btn_fw” type=”fontawesome” icon_fontawesome=”fas fa-info” button_style=”minimal_style” color=”btn_orange” link=”url:%23SIEM” el_class=”plugin-btn”][\/vc_column][\/vc_row][vc_row][vc_column width=”3\/4″][vc_column_text]Every corporate IT infrastructure has grown individually and is unique. In order to keep IAM projects lean, KOGIT endeavors to use the standard functions in the software products and extends these as required by customizing and\/or own add-ons and plug-ins in order to adapt them to the individual system requirements of our customers.<\/p>\n

With our SailPoint certified plugins SoD-Matrix, IIQ History Plugin, SAP Om Importer Plugin and Role Analytics Plugin we offer our customers additional functions that can be seamlessly integrated into SailPoint IdentityIQ. Furthermore, we offer the two AdOns SailPoint Tester and SP2Doc to SailPoint IdentityIQ customers.[\/vc_column_text][\/vc_column][vc_column width=”1\/4″][vc_magic_image image=”9816″ img_link=”gallery_popup” images=”11717,10481,10480″ icon=”img_icon” icon_position=”icon-top-right” image_hover=”h_scale_up” img_size=”large”][\/vc_column][\/vc_row][vc_row top=”40px” bottom=”40px” section_id=”SoD”][vc_column][vc_tour interval=”0″][vc_tab type=”fontawesome” icon_fontawesome=”fa fa-info-circle” title=”SoD Matrix Plugin” tab_id=”1510569877-1-93″][vc_heading subtitle=”Segregation of Duties Matrix for SailPoint IdentityIQ” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]The SoD Matrix Plugin complements SailPoint IdentityIQ with a graphical interface to maintain and visualize the segregation of duties (SoD).<\/p>\n

\"\"The clear representation in the SoD-Matrix is ideal for mapping the personal separation of functions on the IT level. Conflicts, borderline cases and permitted combinations are marked according to a traffic light principle and thus optimally prepared for audits. Data maintenance is carried out in a time-saving manner by mouse click.[\/vc_column_text][\/vc_tab][vc_tab type=”fontawesome” icon_fontawesome=”fa fa-search” title=”Details” tab_id=”1510569877-2-46″][vc_heading subtitle=”Easily overview and edit segregation of duties to save time” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]<\/p>\n

\n

IdentityIQ from SailPoint integrates compliance management and provisioning into an efficient identity and access management solution and is therefore used worldwide in banks and large companies.<\/p>\n

IdentityIQ’s standard features include enhanced role categories and policy guidelines, required to manage segregation of duties (SoD). This is the organizational separation of functions to avoid conflicts of interest. Until now, it was not possible to visualize and manage these role categories clearly in IdentityIQ. The KOGIT SoD-Matrix-Plugin closes this gap.<\/p>\n

The SoD-Matrix-Plugin for IdentityIQ offers a graphical user interface with the extended role SoD and policy guidelines. With this feature, the company-wide SoD rules can be easily overviewed and maintained in a time-saving manner by mouse click.<\/p>\n

The segregation of duties is clearly represented in the matrix that is based on the function categories and the policy guidelines in IdentityIQ. With this clear representation, the company-wide SoD rules can be configured according to the requirements of the MaRisk of the BaFin. Conflicts, borderline cases and permitted combinations are marked according to the traffic light principle and are thus optimally prepared for audits.<\/p>\n<\/div>\n

[\/vc_column_text][vc_empty_space height=”20px”][vc_column_text]More information:

link-template-oneclick.php<\/div>[\/vc_column_text][vc_empty_space height=”20px”][vc_button title=”Please contact us for more detailed information” type=”fontawesome” icon_fontawesome=”fas fa-long-arrow-alt-right” link=”url:%23modal-kontakt|||”][\/vc_tab][\/vc_tour][\/vc_column][\/vc_row][vc_row top=”40px” bottom=”20px” section_id=”History”][vc_column][vc_tour][vc_tab type=”fontawesome” icon_fontawesome=”fa fa-info-circle” title=”IIQ History Plugin” tab_id=”1510572321-1-82″][vc_heading subtitle=”KOGIT IIQ History Plugin” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]\"KOGIT<\/p>\n

SailPoint IdentityIQ tells you where sensitive data is and who is allowed to access it. With the IIQ History Plugin you can see where your data was stored and who had access to it. The KOGIT plugin complements IdentityIQ with an efficient archiving option for identities, roles and access rights. The clear representation of the historical data enables a fast search based on parameters, characteristics and the authorization status at a certain point in time.[\/vc_column_text][\/vc_tab][vc_tab type=”fontawesome” icon_fontawesome=”fa fa-search” title=”Details” tab_id=”1510572321-2-96″][vc_heading subtitle=”KOGIT History Plugin for SailPoint’s IdentityIQ” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]<\/p>\n

\n

Who had access to which data at what time?<\/strong><\/p>\n<\/div>\n

\n

The Plugin supports archiving, reporting and analysis for historical IAM data \u2013 making it ideal for compliance with external audits and forensic investigations. Moreover, it helps companies fulfil statutory data retention requirements, which are typically ten years in many industries. Searches can be executed on archived data on the basis of attributes, values, and time\/date of access activity.\"IIQ<\/a><\/p>\n<\/div>\n

\n

The IIQ History Plugin enables companies to rapidly and precisely find answers to key questions such as: Where was sensitive data stored? Who accessed this data? Was the user authorized to access this data? And what evidence is available to document the activity?<\/p>\n

And while auditors and investigators generally focus on point-in-time inquiries related to user access, user role, and policies, this powerful\u00a0 plugin goes further \u2013 for example, it is possible to identify who assigned or approved access rights and roles, and who had access to a specific transaction or data during a defined time period. KOGIT IIQ History Plugin allows organizations to provide this information to external parties quickly and without placing a major load on their IIQ environment. It generates historical data in a report-friendly format and has an intuitive user interface for reports, historical searches and the selection of filters by identities, by roles, by policies or workgroups.<\/p>\n

Two new features with Version 2.1<\/strong><\/p>\n

The new Multi-Tenancy Capability allows users to store the assigned scope of historicized objects. The UI considers scoping to filter results, just like scopes in the IIQ core product. A new capability supersedes the scope filter, in all other cases, only historical objects in the controlled scope of the logged in user are returned as result records.<\/p>\n

The second new feature is a set of reports which query\u2019s the history database. The History Reports provide pre-configured reports that are available for Identities, Business Roles, IT Roles, Entitlements (identities with access) and Workgroup Membership and allow users to extract report results as PDF or CSV files.<\/p>\n

The KOGIT IIQ History Plugin is based on a data model developed specifically for historical IIQ objects, and includes four custom tables for data on access activities. The \u201ccustom history object\u201d table enables businesses to track changes to data. The \u201ccustom history string\u201d table stores scalar object properties, and enables records to be kept of information such as who was a member of a certain department at a given time. The \u201ccustom history reference\u201d table is similar, but also stores a reference ID, allowing it to track any renaming of objects. The fourth table, \u201ccustom history complex\u201d, supports complex searches with a large number of variables.<\/p>\n

The KOGIT IIQ History Plugin makes use of a highly configurable, smart ETL (extract, transform, and load) process which creates snapshots of IIQ objects and archives these in the history tables. New snapshots are only added to the database when changes to data have taken place. The ETL process can be configured in line with specific needs. The plugin includes a task definition template for scheduled historical data extraction from SailPoint IIQ and will also support an API method for ad hoc single object extraction.<\/p>\n

The KOGIT IIQ History Plugin is quickly installed and easy to use. In a short video<\/a> we demonstrate the functionality of the plugin.<\/p>\n<\/div>\n

[\/vc_column_text][vc_empty_space height=”20px”][vc_column_text]Mehr Informationen:

link-template-oneclick.php<\/div>[\/vc_column_text][vc_empty_space height=”20px”][vc_button title=”For more information or a personal consultation, please get in touch with us.” type=”fontawesome” icon_fontawesome=”fas fa-long-arrow-alt-right” link=”url:%23modal-kontakt|||”][\/vc_tab][\/vc_tour][\/vc_column][\/vc_row][vc_row top=”40px” bottom=”20px” section_id=”Analytics”][vc_column][vc_tour][vc_tab type=”fontawesome” icon_fontawesome=”fa fa-info-circle” title=”Role Analytics Plugin” tab_id=”1510572321-1-82″][vc_heading subtitle=”KOGIT Role Analytics Plugin” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]\"\"<\/p>\n

The KOGIT Role Analytics Plugin simplifies navigation between different tasks in IIQ.<\/p>\n

The plugin provides a user-friendly way for users to view identities, roles and permissions and their corresponding relationships. Daily tasks can be easily zoomed in and out, and the plugin’s search and display functionality is complemented by a role dashboard that highlights important KPI’s of role and permission status and usage.[\/vc_column_text][\/vc_tab][vc_tab type=”fontawesome” icon_fontawesome=”fa fa-search” title=”Details” tab_id=”1510572321-2-96″][vc_heading subtitle=”KOGIT Role Analytics Plugin for SailPoint IdentityIQ” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]The KOGIT Role Analytics Plugin for SailPoint IdentityIQ was developed at the request of our customers for a simpler role navigation in IIQ. With the latest KOGIT plugin, users now have a simple tool to zoom in and out of details to perform daily tasks without having to conduct a new search for each task.<\/p>\n

In addition to the search and display services, the Plugin enhances IIQ and adds a role dashboard that highlights important KPIs.<\/p>\n

Furthermore, it offers the following advantages (among others):<\/p>\n

    \n
  • \u00a0\u00a0\u00a0 Export Options<\/li>\n
  • \u00a0\u00a0\u00a0 A viewing tool for roles, identities, and entitlements<\/li>\n
  • \u00a0\u00a0\u00a0 Representation of the use and assignment of individual objects, such as role compositions<\/li>\n
  • \u00a0\u00a0\u00a0 Dashboard with key figures for using entitlements and roles<\/li>\n<\/ul>\n

    [\/vc_column_text][vc_empty_space height=”20px”][vc_column_text]More information:

    link-template-oneclick.php<\/div>[\/vc_column_text][vc_empty_space height=”20px”][vc_button title=”For more information or a personal consultation, please get in touch with us.” type=”fontawesome” icon_fontawesome=”fas fa-long-arrow-alt-right” link=”url:%23modal-kontakt|||”][\/vc_tab][\/vc_tour][\/vc_column][\/vc_row][vc_row top=”40px” bottom=”20px” section_id=”SAP”][vc_column][vc_tour][vc_tab type=”fontawesome” icon_fontawesome=”fas fa-info-circle” title=”SAP OM Importer Plugin” tab_id=”1510572321-1-82″][vc_heading subtitle=”Datatransfer from SAP to SailPoint IdentityIQ” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]\"\"The KOGIT SAP OM Plugin allows users to load data from SAP OM to better support a number of IAM scenarios. Some of these include:<\/p>\n
      \n
    • Vacant manager position,<\/li>\n
    • Automatic roll creation,<\/li>\n
    • Automatic role assignments with a transition period,<\/li>\n
    • Improve mover processes and<\/li>\n
    • Simulating organizational changes.<\/li>\n<\/ul>\n

      [\/vc_column_text][\/vc_tab][vc_tab type=”fontawesome” icon_fontawesome=”fa fa-search” title=”Details” tab_id=”1510572321-2-96″][vc_heading subtitle=”KOGIT SAP OM Importer Plugin for SailPoint IdentityIQ” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]Companies using the SAP Organizational Management (OM) often need the information, that is contained in SAP OM, in SailPoint IdentityIQ as well. The new KOGIT plugin enables this for users. The KOGIT SAP OM Plugin provides an IdentityIQ task that connects to an SAP HCM system, loads the organizational structure and stores it in IdentityIQ. Since IdentityIQ does not contain its own hierarchical object, roles can be used to model hierarchical structures. Therefore, the KOGIT SAP OM Plugin maps the SAP objects to role objects.<\/p>\n

      The KOGIT SAP OM Importer Plugin provides a task to load the following organizational data from SAP OM:<\/p>\n

        \n
      • \u00a0\u00a0\u00a0 Organizational Units,<\/li>\n
      • \u00a0\u00a0\u00a0 Positions,<\/li>\n
      • \u00a0\u00a0\u00a0 Jobs,<\/li>\n
      • \u00a0\u00a0\u00a0 Persons and<\/li>\n
      • \u00a0\u00a0\u00a0 Executive positions.<\/li>\n<\/ul>\n

        The task can be configured to create a hierarchy of business roles in IdentityIQ from these objects, that corresponds to the hierarchy in SAP OM. It supports the automatic creation of assignment rules to assign these roles to identities that in turn are assigned to entities.<\/p>\n

        Optionally, role assignments, that take place before or after the actual assignment, can be configured to an organizational structure in SAP OM begins or ends.[\/vc_column_text][vc_empty_space height=”20px”][vc_column_text]More information:

        link-template-oneclick.php<\/div>[\/vc_column_text][vc_empty_space height=”20px”][vc_button title=”Want to learn more? Please get in touch with us.” type=”fontawesome” icon_fontawesome=”fas fa-long-arrow-alt-right” link=”url:%23modal-kontakt|||”][\/vc_tab][\/vc_tour][\/vc_column][\/vc_row][vc_row top=”40px” bottom=”20px” section_id=”SIEM”][vc_column][vc_tour][vc_tab type=”fontawesome” icon_fontawesome=”fas fa-info-circle” title=”SIEM Export Plugin” tab_id=”1510572321-1-82″][vc_heading subtitle=”The interface from IdentityIQ to a SIEM” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]\"\"The SIEM Plugin is an essential building block of the architecture for secure identity access management that integrates IAM, PAM and SIEM solutions.
        \nTo deliver log data (AuditEvents) from IdentityIQ to a SIEM requires an interface. The Advantages:<\/p>\n
          \n
        • A plugin for exporting syslog events in Common Event Format (CEF)<\/li>\n
        • The task only needs the IP address and the port of the SIEM\/Syslog receiver<\/li>\n
        • The task regularly exports all configured AuditEvents from IdentityIQ to the defined address<\/li>\n<\/ul>\n

          [\/vc_column_text][\/vc_tab][vc_tab type=”fontawesome” icon_fontawesome=”fa fa-search” title=”Details” tab_id=”1510572321-2-96″][vc_heading subtitle=”KOGIT SIEM Export Plugin for SailPoint IdentityIQ” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]The customers requirement for integration of IdentityIQ with a SIEM requires an interface to deliver protocol data from IdentityIQ to a SIEM. In this context log data refers to the AuditEvents in IdentityIQ. Further technical or business log data like Syslog or ProvisioningTransaction are not considered.
          \nTechnical log data of the web server can be collected via the operating system monitoring of the SIEM.<\/p>\n

          The plugin transmits the AuditAction events from IdentityIQ to the SIEM system via syslog in a Common Event Format. For this purpose, a so-called Scheduled Task is configured. It is not a real time procedure but can be used as a near time procedure by appropriate clocking.<\/p>\n

          The plugin is currently being supported in English and German.[\/vc_column_text][vc_empty_space height=”20px”][vc_column_text]More information:

          link-template-oneclick.php<\/div>[\/vc_column_text][vc_empty_space height=”20px”][vc_button title=”Want to learn more? Please get in touch with us.” type=”fontawesome” icon_fontawesome=”fas fa-long-arrow-alt-right” link=”url:%23modal-kontakt|||”][\/vc_tab][\/vc_tour][\/vc_column][\/vc_row][vc_row][vc_column width=”1\/6″][vc_empty_space height=”20px”][vc_icon icon_fontawesome=”fa fa-file-text-o” color=”custom” background_style=”rounded-outline” size=”xl” align=”center” custom_color=”#3e4b58″][\/vc_column][vc_column width=”5\/6″][vc_heading subtitle=”Simple documentation with SailPoint2Doc” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]With the SailPoint2Doc AddOn from KOGIT, customer-specific adaptations to SailPoint installations can be displayed in a clear form, easily and without system access. Project managers, consultants and developers receive an interactive documentation of the complete workflows at the push of a button. This reduces the amount of training required for new project staff. SailPoint2Doc shows an interactive summary of the most important parameters of the adjustments instead of the code of the XML files and visualizes all connections between the objects – thus the result is also well readable and understandable for project members who are lacking the detailed technical knowledge of SailPoint products. While manually created documentation quickly becomes obsolete, SailPoint2Doc offers the advantage of the created documentation always being up-to-date.[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column width=”1\/6″][vc_icon icon_fontawesome=”fa fa-file-code-o” color=”custom” background_style=”rounded-outline” size=”xl” align=”center” custom_color=”#3e4b58″][vc_empty_space height=”20px”][\/vc_column][vc_column width=”5\/6″][vc_heading subtitle=”Automated tests for SailPoint IdentityIQ workflows and rules” subtitle_tag=”h2″ divider=”div-between” divider_color=”#f39100″][vc_empty_space height=”20px”][vc_column_text]The efficient testing of project-specific adaptations for SailPoint IdentityIQ is an essential component in the quality assurance of every implementation project. The SailPointTester is a Java-based add-on that allows automatic (Junit-)tests of rules, workflows, email templates and much more, which integrate seamlessly into the development process. With the SailPointTester, rules or individual workflow steps can be executed locally in the development environment without connection to a database and the results verified. For more extensive tests, the SailPointTester supports offline mode as well as tests against a real IdentityIQ database. A must for every complex implementation project.[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_promo_box style=”twc_pb_boxed” shadow=”img_shadow_m” icon_fontawesome=”fa fa-comments-o” b_text=”Contact” heading=”Contact us here” text=”For more detailed information on our IAM solutions, please contact us.” bg_color=”#e9e9e9″ icon_color=”#36353c” link=”url:%23modal-kontakt|||” b_text_color=”#36353c” b_border_color=”#36353c” bh_text_color=”#ffffff” bh_bg_color=”#36353c” bh_border_color=”#36353c”][\/vc_column][\/vc_row][vc_row][vc_column][vc_modal id=”kontakt” heading=”Kontaktieren Sie KOGIT f\u00fcr mehr Informationen” width=”500px”][vc_column_text]