Challenge:

Leveraging an existing installation of the IBM Security software suite, the customer wanted an enhanced capability for fine-grained access controls to manage dynamic user roles and groups in their organization.

Solution:

OnWire developed a custom-built, SOAP-based Web Service that interoperated with the IBM Security software suite. The direct LDAP manipulation was developed to manage the process of dynamic Attribute Based Access Controls (ABAC). A web-based console was also developed, which allowed for the graphical creation of complex attribute based roles.

Products Used:

  • IBM WebSphere Application Server
  • IBM Security Directory Integrator
  • IBM Security Identity Manager

Client Value:

OnWire provided the customer with a scalable solution to meet their requirements for a custom ABAC solution. With a fine-grained access control mechanism, the client gained more control of their IAM solution – which ultimately improved their governance and security posture.