Identity Management Project Timeline

The Identity Management project's goal is to build an identity management infrastructure that will provide enterprise-wide authentication/authorization, role based access controls, and improve self-service as related to digital identities. To achieve these goals, the project has divided its milestones into three phases.

Phase 1: Build the Enterprise Authentication/Authorization Infrastructure

The first phase of the Identity Management project focuses on building an identity management infrastructure that will provide the foundation for enterprise-wide authentication/authorization.

• An enterprise Microsoft Active Directory for Identity Management. This infrastructure will initially service the authentication needs for the SIS project.
• Include RSA two-factor authentication and Shibboleth in the architecture.

We expect to have identity consolidation, password management, and provisioning/de-provisioning in the central administrative systems during this phase.

Phase 2: Implement Access Controls, Authentication/Authorization Controls

The second phase will use the identity management infrastructure to identify what accounts/data an individual has access to in the central administrative systems and enforce access controls needed to protect institutional data. The project will define access controls with more granularities and use these to verify, audit, and report on access level. The project will also begin to expand IdM controls to departmental systems, which increases the ability to audit an identity's life cycle and decreases security risks.

Phase 3: Expand Interfaces with Department Systems & Improve Self-Service

Beginning in Phase 2, the IdM project will build interfaces with departmental systems. In the third phase, the project will interface with departmental systems and apply identity management standards across systems. The infrastructure will improve role-based access to identity management related resources (account management, password reset, etc.) in central administrative systems in earlier phases, however, in Phase 3, more real-time interfaces between systems increases business and technology efficiency and expands self-service improvements across the university.