SailPoint IIQ - ForgeRock - FAQ

NIST (National Institute of Standards and Technology) provides comprehensive guidance for improving Identity and Access Management (IAM) systems. These guidelines are part of broader cybersecurity frameworks and publications that help organizations secure their digital identities and access controls. Here's an overview of the key NIST controls and guidelines relevant to IAM: 1. NIST SP 800-53: Security and Privacy Controls for Information Systems and Organizations This document provides a catalog of security and privacy controls for federal information systems and organizations. It covers a wide range of topics, including IAM. Relevant control families include: AC (Access Control) : This family of controls deals directly with access to information systems and includes: AC-1: Access Control Policy and Procedures AC-2: Account Management AC-3: Access Enforcement AC-4: Information Flow Enforcement AC-5: Separation of Duties AC-6: Least Privilege AC-7: Unsuccessful Login Attempts AC-1...

Five main pillars of ForgeRock ForgeRock Identity Management ForgeRock Identity Management ForgeRock Directory Services ForgeRock Identity Gateway ForgeRock Open ICF (Connector Framework) IAM (Identity & Access Management) Identity Management mainly deals with: Creating or onboarding identities into organization Managing users digital identities and its life cycle Here main goal is to provide right access to the right person In Identity Management attributes are loaded to a identity and those are managed throughout the life cycle of user Access Management mainly deals with: Attributes which are loaded while identity management, now based on the value of these attribute's, here we takes decision in yes/no to allow or block that user from accessing that resource. Basics of Access Management Authentication - Its process of verifying Who you are? e.g. When you log on to Laptop with username and password , You are authenticating. Authorization - It refers What you do? Verifying th...

The User certification process in Identity Management (IDM) systems, often referred to as "access certification" or "access review," is a crucial procedure to ensure that users have appropriate access rights to organizational resources. It helps in maintaining security, compliance, and efficient access control within an organization. Here is an overview of the typical steps involved in the user certification process in IDM: 1.  Define Certification Campaigns Objective : Establish the purpose and scope of the certification campaign. Scope : Determine which users, roles, and resources will be reviewed. Frequency : Decide how often the certification campaigns will occur (e.g., quarterly, bi-annually). 2.  Select Reviewers Assign Reviewers : Identify who will review and certify access. Typically, these are managers, role owners, or system owners. Training : Provide necessary training to reviewers on the certification process and criteria. 3.  Prepare Data for Review Gat...