Memority My-Identity manages the lifecycle of all identities (employees, partners, customers, connected objects) accessing your information system.
It also brings additional features:
- Authorization for identities to access the resources to which they are authorized to access
- Real time provisioning of target systems
- Management of user consent for data sharing
- Deviation detection from compliance objectives
- 360° view of identities accessing your information system
Memority My-Identity: features
Memority My-Identity can either be driven by data from your authoritative sources (HRIS, partner repository, CRM…) or act as an authoritative repository (for your service providers, for example). In this way, Memority My-Identity can be fed in a multiple (and not exclusive) ways:
• Direct reading of authoritative sources via Memority connectors
• Authoritative sources driving Memority directly via its APIs
• By using Memority portal, configured to your needs
Identity lifecycle management
Memority My-Identity supports all processes linked to digital identities: creation, modification, mobility with temporary job overlap, departure, temporary absence, self-registration, change of identity type (from employee to service provider, etc.), right to forget and data consultation.
Memority My-Identity is based on an extensible role model. It allow the creation of new types of roles, or offers specific views to application managers, using application-specific naming. Application-specific roles can have constraints applied to them, known as “dimensions”, in the objective to scope the application of the role.
Advanced delegation and workflow
Memority My-Identity enables different types of organization creation, even multi-dimensional ones, in order to define the delegation model best suited to your company. This delegation model will be used to reduce the visibility scope of your users within the solution, in terms of identities, roles and resources.
Real time provisioning
Each time an identity or one of its authorizations is modified, Memority My-Identity propagates the direct or calculated changes in real time to each of the targets affected. Memority offers connectors for both on-premise and SaaS applications. Memority also offers generic connectors for provisioning any application via flat file, mail, SQL, LDAP, REST API and SOAP Webservice.
Memority My-Identity offers different types of rights review or re-certification:
• Review by campaign carried out on a given population for one or more roles or resources
• On-the-fly” re-certification: recurring review of an assigned role, triggered automatically at regular intervals, thus avoiding the pitfalls inherent in conventional re-certification campaigns, such as overloading validators.
All reviews are used to generate reports tracking campaigns, discrepancies and non-conformities.
In the case of consumers or partners, it may be necessary to share identity attributes of your consumers or partners with third parties. This can only be done with their consent. Memority My-Identity enables you to manage these consents and store the consent given for each attribute towards partners.
Memority My-Identity provides end-users with self-service functions, enabling them to create their own account, update their identity data, request additional rights, track the progress of workflows to which they are subject, consult their authentication and access data, and more.
Memority My-Identity offers a complete set of identity and access reports. Reports are graphical and dynamic, and can be filtered according to various criteria. Reports are executed on the scope of visibility of the actor concerned. Cross-referencing My-Identity data with My-Access generates additional value for your administrators and auditors.
Memority My-Identity: your benefits
Improve your productivity: your users have access to their applications as soon as they request them via self-service. So they’re up and running faster – and more productive!
Apply the policy of least privilege. Similarly, if a user leaves, you can be sure that his or her access will be completely revoked.
Give your auditors and compliance team the visibility they need for regulatory certifications.
Avoid repetitive, low-value-added tasks by automating user account management within your applications, while maintaining permanent visibility of your applications.
Rationalization and cost reduction
Use a single IAM platform for all your identities. The benefits are numerous: capitalize on your expertise, rationalize your architecture, simplify data synchronization, provide 360° visibility of identities accessing your IS and, as a result, reduce your costs!
Empower your users in their access requests, their follow-up, the display of rights already obtained, identity modifications in progress or to come, etc.