White, 2008

Abstract

The use of Identity Management to control access to applications and resources is emerging as a key concept in meeting the requirements of information security. This paper looks at the design and implementation of Identity Management within the Australian Public sector and discusses some of the issues encountered. The paper describes the major elements of an Identity Management Architecture and discusses the use of processes as chokepoints to enhance identity and authentication security. This paper proposes an Identity Management Architecture to meet both information security and strategic requirements and also be ready to move towards a federation with other enterprises. This work should contribute to the further development of Identity Management models.

The Identity Management Architecture shows how an enterprise can maximise its current resources and policies to improve information security as well as position it to achieve strategic goals. The architecture shows how information security is actually an enterprise objective not just an IT requirement. The architecture shows enterprises how to approach and improve their own information security by using this type of holistic architecture.