Challenge:
Leveraging an existing installation of the IBM Security software suite, the customer wanted an enhanced capability for fine-grained access controls to manage dynamic user roles and groups in their organization.
Solution:
OnWire developed a custom-built, SOAP-based Web Service that interoperated with the IBM Security software suite. The direct LDAP manipulation was developed to manage the process of dynamic Attribute Based Access Controls (ABAC). A web-based console was also developed, which allowed for the graphical creation of complex attribute based roles.
Products Used:
- IBM WebSphere Application Server
- IBM Security Directory Integrator
- IBM Security Identity Manager
Client Value:
OnWire provided the customer with a scalable solution to meet their requirements for a custom ABAC solution. With a fine-grained access control mechanism, the client gained more control of their IAM solution – which ultimately improved their governance and security posture.