IBM Tivoli Federated Identity Manager Business Gateway

IBM Tivoli® Federated Identity Manager Business Gateway is the ideal entry point for establishing federated Web SSO capabilities. Built especially for small-to-midsize organizations, this powerful collaboration software uses open standards to bring together customers, partners and suppliers—with a single, easy-to-deploy application that provides a smooth migration pathway to an enterprise-level application.

Implementing a federated SSO application not only helps improve the user experience—by providing a single password for logon to multiple business partners—but it also enables you to more effectively manage identities across your infrastructure while preserving the confidentiality of user data. With Tivoli Federated Identity Manager Business Gateway, your organization can leverage a single application that provides:

• Simplified integration with online partners.

• Fast time-to-market for e-business initiatives via accelerated SSO deployment, achieved through loose coupling between federation software and business applications.

• A lightweight, easily deployable application for straightforward SSO needs.

• Audit logs, tracking and incident reports—as well as security best practices—to meet corporate and regulatory compliance policies.

AT-A-GLANCE

Collaboration with customers, partners, agents, and/or providers often plays a key role in the Business Process Management initiatives motivating a move towards a Service Oriented Architecture (SOA). Browser-based integration with these external organizations, and basing the integration on open standards for federated single sign-on, provides quick gains in user productivity and experience, while also providing opportunities for reducing user administration costs.

IBM Tivoli Federated Identity Manager Business Gateway (TFIM-Business Gateway) provides an entry-level federation solution for small-to-medium enterprises, as well as providing a low infrastructure option for department/project focused federation solutions. Unlike many competitive offerings, TFIM-Business Gateway does not rely on proprietary APIs that tightly bind business applications to the federation software. This loose coupling between TFIM-Business Gateway and business applications provides faster deployment times and reduced ongoing maintenance costs.

For those enterprises that later grow their federation needs, TFIM-Business Gateway provides an easy migration path to the enterprise level TFIM offering, with little or no application changes and a consistent management user interface.

IBM Tivoli Federated Identity Manager Business Gateway provides:

• Improved user experience and reduced user administration costs by using federated single sign-on with customer, partner, agent, and provider organizations

• Loose coupling between the federation software and business applications, which leads to faster deployment times and reduced ongoing maintenance costs

• Flexible identity and attribute mapping during Federated Single Sign-On

• An entry level federation solution with smooth migration path to an enterprise-level solution

• A small infrastructure footprint

• A suitable federation solution for small-to-medium enterprises or department/project level requirements

FIM Business Gateway is a software solution that supports open standards to provide web SSO to members of a business federation. Key characteristics of the product include:

- Stand-alone Web Federated-SSO Solution

• Built on embedded WebSphere Application Server 6.1

• Lightweight, less-function companion to FIM Enterprise

- Single installation allows multiple federations for:

• Identity Provider role

• Service Provider role

- Out-of-the-box integration with Identity stores:

• Windows Desktop SSO via WebSphere 6.1 SPNEGO plugin (TAI)

• Enterprise Directory via WebSphere Authentication services

- Out-of-the-box integration with Application platforms:

• .NET via IIS plugin

• J2EE via WebSphere LTPA token

- Easy replication for High Availability

• replication of configuration must be done manually, deployment to WebSphere cluster not supported

- Support for SAML 1.0 and 1.1 (Browser POST & Artifact)

Benefits

IBM Tivoli Federated Identity Manager Business Gateway implements an identity business process that enables companies to simplify identity management and the ability for these identity-based business processes to collaborate securely and seamlessly within a service-oriented architecture. It can provide the following for companies engaging in a federation.

For the business executive:

• Best-of-breed integrated solution from a proven vendor

• The proven experience of IBM Global Services security and privacy practice for Tivoli Federated Identity Manager and Tivoli identity management solutions

• Low total cost of ownership

• IT manageability

For the IT executive:

• Lower user administration and provisioning costs related to identity management

• Simplified integration between companies and their partners’ Web sites

• Improved business compliance through reduced security exposure

• Improved end-user experience through Federated Single-Sign-on and Single Sign-off

• Expanded business reach of service providers creating revenue-generating opportunities

• Simplified administration of security in cross-enterprise business processes by delivering "security as services"

• Part of a complete range of solutions for identity management, ranging from user lifecycle management through authentication, authorization and privacy, to the identity infrastructure itself in the form of directory and metadirectory

Unique differentiators

• Implements key standards and specifications for federated identity management: SAML, Liberty, WS-Federation, and WS-Trust

• Delivered and supported by IBM Tivoli, which is committed to enterprise security, offering a full identity management portfolio, and continuing to strongly influence and drive Federated Identity Management and other security standards

• “Drop-in” federation with minimal impact on applications – providing quicker time to value and greatly reduced ongoing maintenance costs

• Offers attractive per-user tiered pricing model with unlimited user license model for securing e-business

• Is architected for high availability and scalability and is in use by customers to secure federated users numbering in the millions