Access Certification
Hitachi ID Access Certifier is a
Hitachi ID Systems solution for distributed review and cleanup
of user entitlements.
Access Certifier closes the gap between business
process, which should determine what user rights are appropriate,
and Authentication / Authorization / Audit infrastructure (AAA),
where user rights are actually stored and enforced.
Access Certifier ensures that user access rights are current and appropriate by periodically requiring business stake-holders to review user profiles, login accounts and security group memberships. Different stake-holders can be asked to review different users: managers review their direct subordinates, application owners review the users of their applications and security group owners review their memberships.
Using access certification, stake-holders identify no-longer-employed users, unneeded accounts and inappropriate security group memberships. A workflow engine captures these changes, sends them to suitable authorizers for review and -- if they are accepted -- automatically deactivates inappropriate login accounts and group memberships on sensitive systems.
Electronic signatures capture the actions of stake-holders, creating a trail of accountability for access rights that remain after certification and cleanup are complete.