June 2020 Update
IAM Program Welcomes André Jenkins
The IAM team would like to welcome André Jenkins as the new IAM Program Manager! André recently joined the Office of Information Security as the new Deputy CISO after many years in PSOM, and he will lead the IAM team through the design and implementation phases of the project. He replaces Dawn Augustino, who led the project through the planning, analysis, and vendor selection phases. As we welcome André, the team would like to thank Dawn for her leadership and all her excellent work on the project.
Internal IAM Project
The Internal IAM project includes a re-engineering of Penn’s core IAM infrastructure, replacing 17-year-old, custom-built identity management systems and processes with a standards-based, modern solution to strengthen Penn’s overall security posture and ability to comply with emerging global regulatory requirements. The new IAM solution will be implemented in phases. Recent progress includes:
- The team completed proof-of-concept activities in May in support of product selection. The purpose of the proof-of-concept was to test a subset of our overall solution requirements, focusing on the specific functional areas we consider most critical to Penn. Use cases were drawn from our requirements gathering with Schools/Centers, peers, and internal review.
- The team is finalizing selection of our vendor and implementation partner for an Identity Management solution. Product purchase is targeted for August, with design activity beginning in October.
- FY 21 begins the following implementation phase activities:
- Preparation activities – includes data cleanup, policy work, etc.
- Solution design and implementation plan – with implementation partner
- Begin implementation work
- The team also continued peer and consultant advisory, adding NYU to the list of peers with whom we have consulted to learn about their IAM/security modernization efforts. We will continue to look for opportunities to learn from and partner with our peers.
PennPath Service Offering Reminder
As a reminder, PennPath is available for use by Schools and Centers that have users who need access to University resources, but neither need nor want all the access privileges and security requirements associated with a PennKey. These users include online learners, research collaborators, business partners, and other external affiliates. For detailed information about PennPath, visit www.isc.upenn.edu/pennpath. If you have any questions or would like to discuss how your organization can benefit from PennPath, please contact help@isc.upenn.edu.
Questions & Feedback
ISC values your feedback. If you have questions, comments, or suggestions, please contact penn-iam@upenn.edu.
We look forward to sharing more progress with you soon!
The Penn IAM Team
