January 2020 Update
Internal IAM Project
The
Internal IAM project includes a re-engineering of Penn’s core IAM infrastructure, replacing 15-year-old, custom-built identity management systems and processes with a standards-based, modern solution to strengthen Penn’s overall security posture and ability to comply with emerging global regulatory requirements. The new IAM solution will be implemented in phases.
Recent progress includes:- The IAM team is finalizing the product request for proposal (RFP) to vendors targeted for the end of this month. The RFP was developed with input from our campus partners:
- The team completed requirements assessment sessions with the owners of Penn Community components and source systems and documented opportunities discovered during requirements collection.
- The team completed Knowledge Exchange sessions with application developers and data users from the Schools and Centers to share the work planned for FY20 and to better understand how Schools/Centers are currently using Penn Community. Use cases were documented during the sessions.
- In addition, a survey was sent to School and Center help desks to collect feedback on current credential and policy management practices.
IAM “By the Numbers”
During Q1-Q2/FY20, IAM activities included:
- 60+ sessions held to collect requirements
- 100 stakeholders participated in requirements gathering
- 109 functional requirements documented
- 99 non-functional requirements documented
- 90 use cases documented
What's Ahead
Upcoming activities include:
- The IAM team will submit the RFP for an IAM product to vendors at the end of January. The remainder of this fiscal year will include proof-of-concept activities in support of product selection.
- This month, we begin hosting a monthly Client Partners meeting with the IAM team to collaborate and share information as the project continues.
- Updates will be shared with IT Roundtable as the project progresses.
PennPath Service Offering Reminder
As a reminder, PennPath is available for use by Schools and Centers that have users who need access to University resources, but neither need nor want all the access privileges and security requirements associated with a PennKey. These users include non-traditional learners, research collaborators, business partners, and other external affiliates. A new
Access Management Services offering, PennPath provides an authentication credential that can integrate with applications like learning management systems, customer relationship management (CRM) tools (e.g., Salesforce), and class registration apps (e.g., Learning Stream).
Questions & Feedback
ISC values your feedback. If you have questions, comments, or suggestions, please contact
penn-iam@upenn.edu.
We look forward to sharing more progress with you soon!
The Penn IAM Team
