Identity Integration Server for Entitlement Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face inefficiencies and costs in applying entitlements due to the need for direct permissions to applications, potential for redundant calls, and inconsistent application, especially when business processes are integrated with entitlement management.
Innovation Solution
An identity integration server centrally manages entitlements by decoupling business processes from application, selecting workflows and identities, and initiating separate processes to apply entitlements, allowing for parallel evaluation and batch processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If entitlements are applied directly to an application by the business process executor, then the entitlement application is integrated with the business process, but the executor requires direct permissions to the application and redundant calls occur
Solution Approach 1:
An identity integration server is introduced as an intermediary component between the business process executor and the application. The server receives entitlement application requests, manages the entitlement data, and applies entitlements centrally without requiring the business process executor to have direct permissions to the application. This mediator pattern eliminates the need for redundant permission management while maintaining integrated entitlement application.
2Adaptability or versatility
If multiple business processes apply the same entitlement directly to an application, then each process can independently manage entitlements, but redundant calls to the application occur increasing system load and cost
Solution Approach 1:
Multiple entitlement application requests from different business processes are merged into a single centralized entitlement management system. The identity integration server consolidates entitlement application logic, so that even when multiple business processes need to apply the same entitlement, they all route through the server which manages the actual application once, eliminating redundant calls and reducing system load while preserving the flexibility of multiple business processes.
3Reliability
If entitlements are applied inline with the business process, then the application is consistent with business requirements, but the system requires direct permissions and incurs higher costs
Solution Approach 1:
The identity integration server acts as a mediator that maintains entitlement application consistency with business requirements while reducing implementation costs. The server receives business process context, applies appropriate entitlements based on centralized policies, and ensures consistent application across all processes. This approach maintains reliability through centralized control while reducing costs by eliminating the need for multiple direct application permissions and reducing redundant operations.
Data Source
AI summary
A method and system for managing and applying entitlements is described herein. An identity integration server centrally manages data associated with entitlements for a plurality of identities. The integration server may select one of a plurality of workflows. One or more of a plurality of entitlements to be used in the workflow are selected, and a set of identities for which the workflow is applicable is selected. A determination is made as to whether the workflow should be run on the identities. If so, then the workflow is initiated. The one or more entitlements are then added to a granted entitlements list. Then, a separate process may be initiated to apply the one or more entitlements to the one or more identities.