The Identity and Access Management Modernization Program (IAMMP) will guide a set of projects whose goal is to modernize the University's Identity and Access Management systems, business processes, data management, and technical architecture, as envisioned in the IAM Roadmap. IAMMP includes the implementation of new IAM tools, the transition and/or retirement of legacy IAM tools, and the bridging and integration work required to maintain IAM services as the campus computing landscape transitions during the Administrative Systems Modernization Program. IAMMP will help ensure that the individual projects related to IAM modernization are aligned technically with the new IAM technical architecture and integration strategy, that resources are allocated efficiently across projects, and that cross-project issues are identified and resolved effectively.
Project Goals
The goals of the IAM Modernization Program include:
- Implementation of SailPoint IdentityIQ and the new and enhanced IAM services in scope for the program;
- Transition and/or retirement of legacy IAM services in scope for the program; and
- Implementation of required integrations and bridges with source and consuming systems as those systems change as part of ASMP.
To achieve these goals, IAMMP will identify, plan, resource, and monitor a set of projects. IAMMP will provide a common oversight and management structure for these projects. Each project in the program will be integrated into the overall program schedule to ensure it is aligned with program priorities and resource availability.
Scope
The project scope includes:
- Identity administration and provisioning;
- Password and credential management;
- Access request and approval management, including access recertification;
- Group and role management, including role-based access management;
- Enterprise authorization reporting (via an authorization repository that collects authorization information from all University systems); and
- Risk-based security controls and assurance level management.
IAMMP will also include the transition and retirement of many legacy IAM systems. IAM systems that are in scope for transition or retirement include:
- TIM (uTexas Identity Manager)
- TOM (TED on the Mainframe)
- Apollo
- DPUSER
- OHS Contacts System
- SSN Reference Framework
In addition, IAMMP will include projects to integrate the current and future IAM environments with both source systems and consuming systems across campus, including those changing as part of ASMP.