November 01, 2004 — CSO — Why Identity Management
n Reduced sign-on saves time for employees. In help desks, call centers and other places, time saved equals money saved.
n Automatic user provisioning streamlines the process of establishing or transferring employees' access to the resources they need.
n Automatic deprovisioning means that once employees leave, their system access can be shut off quickly and efficiently.
What to watch for:
n If you're planning on true single sign-on, think about stronger authentication. One lost password or laptop can create a lot more vulnerability.
n Successful projects start small and address very specific business needs. More functions can be added over time. Think reduced sign-on, not single sign-on, for example.
n Don't overlook the process and politics components.
Read more about identity management in CSOonline's Identity Management section.
Other stories by Deborah Radcliff
More Salted Hash with Bill Brenner