Oracle Magazine - September/October 2007 - Marcelo Machado

Recommendations

Info

DAVE BRADLEY OPEN BY DAVID A. KELLY PFIZER USES ORACLE SECURITY FEATURES TO OPEN THE DOOR TO PARTNERS AND LOCK DOWN IDENTITY AND DATA. WILLIAM BARNES, PFIZER’S MANAGER OF IDENTITY SERVICES, TALKS ABOUT THE SOLUTION. and SECURE ompanies have always had a huge interest in controlling who gets to see what information or manage which data. The increased security that results from controlling access to systems and applications is a basic business value. In addition, automating access management increases efficiency and reduces the resources required to manage individual user access to applications or systems. With today’s greater demands for data security, organizations have realized additional benefits from deploying ORACLE MAGAZINE SEPTEMBER/OCTOBER 2007 53
access management, especially in areas such as compliance and federation. “With the advent of the Sarbanes- Oxley Act [SOX] a few years ago, capabilities like Web access management have become almost the de facto technology that you use to enforce some of the SOX requirements, such as Section 404,” says Wynn White, vice president, product marketing, Oracle. “Access control and identity management systems can enable organizations to enforce access and provide a detailed audit trail to show auditors exactly what’s happening.” Many organizations have also identified new value in federated access management, which gives business partners greater access to corporate systems and applications. Federated access management solutions can streamline processes and reduce risk and security vulnerabilities. “The idea is that if you have a trusted partner that they’ve authenticated to, then you can rely on that authentication to let them into your application without necessarily storing all sorts of private data that might be breached,” explains Trent Henry, senior analyst, Burton Group. In many cases, even organizations that have already deployed access management are taking a fresh look at its potential. THE EXPANDING ROLE OF ACCESS MANAGEMENT Pharmaceutical giant Pfizer is a good example of a company that’s expanding its use of access management to meet an ever-broadening set of IT challenges and business opportunities. The goal is to treat authentication as an infrastructure service, so that each application can require the proper form of authentication from users. This structure is important because the company’s pharmaceutical research and development efforts around developing and marketing new drugs entail both applications that are low sensitivity, with a low risk of information disclosure and loss of data integrity, and high sensitivity, with high requirements for absolute data integrity and for ensuring that data not be disclosed to those who shouldn’t have access. 54 SEPTEMBER/OCTOBER 2007 ORACLE.COM/ORACLEMAGAZINE Pfizer uses Oracle Access Manager and Oracle Virtual Directory for identity and access management. “We’ve worked closely with Oracle to develop a solution that enables individual users to select the level of authentication that’s right for the task,” says William Barnes, Pfizer’s Manager of Identity Services. SNAPSHOT Pfizer www.pfizer.com Location: New York City Industry: Pharmaceutical Employees: 100,000 Oracle products: Oracle Database, Oracle Access Management, Oracle Identity Management The company started by leveraging two Oracle products to build a unified—and centralized—portal for moreefficient internal and external access. “We use Oracle Access Manager and the Oracle Virtual Directory products for our identity and access management infrastructure,” says William Barnes, manager of identity services, Pfizer. “We’ve worked closely with Oracle over the past two years to develop a solution that enables individual users to select the level of authentication that’s right for the task they’re trying to do.” That solution, a portal called logon.pfizer.com, enables a more-flexible authentication system for organizations and their partners. The solution allows end users to determine what form of credential they would like to use—from logon IDs and passwords to digital certificates or two-factor authentication options. As one example of how flexible authentication can be, Pfizer is a member of the biopharmaceutical group Signatures and Authentication for Everyone (SAFE), an organization that delivers electronic credentials for business-to-business transactions. In accessing the portal, an internal Pfizer user might use a standard logon ID/ password combination, and an external partner might use a SAFE certifi- DAVE BRADLEY
Page 1 and 2:
��
Page 3 and 4:
www.prodesign.de Best-in-class arch
Page 6 and 7: Revealed They tried so hard to conc
Page 8 and 9: FEATURES Cover by Richard Merchán
Page 11 and 12: Unlock the Grid. Storage solutions
Page 13 and 14: what if EVERYTHING WENT 5X FASTER?
Page 15 and 16: Your corrections, your opinions, an
Page 17: Innovation Matters Oracle Database
Page 20 and 21: Oracle OpenWorld 2007 Special Secti
Page 22 and 23: at OracleOTN BULLETIN Crash into Or
Page 24 and 25: elease includes an automatic synchr
Page 26 and 27: BOB ADLER at OracleINTERVIEW Change
Page 28 and 29: ��
Page 30 and 31: ��
Page 32 and 33: PARTNER SPOTLIGHT Partners Support
Page 34 and 35: SPECIAL ADVERTISING SECTION An Ounc
Page 36 and 37: “We assume that everything is goi
Page 38 and 39: New Database Vault The only databas
Page 40 and 41: DATABASE 11g RICHARD MERCHÁN ORACL
Page 42 and 43: BOB ADLER technology. After beta te
Page 44 and 45: amount of time we spend on tuning t
Page 46 and 47: CHARITY DEMEER and related informat
Page 48 and 49: ORACLE DATABASE 11g Special Adverti
Page 50 and 51: “ It’s a fact that no one vendo
Page 52 and 53: “ We’ve seen features in Oracle
Page 54 and 55: Akey Oracle partner in the developm
Page 58 and 59: “Our authentication portal has mu
Page 60 and 61: Fastest Growing Middleware Oracle F
Page 62 and 63: ER WITHIN technology at the edge of
Page 64 and 65: ANDREA MANDEL “Oracle is clearly
Page 66 and 67: developerFRAMEWORKS BY STEVE MUENCH
Page 68 and 69: ees in the current department (excl
Page 70 and 71: developerBROWSER-BASED Express Web
Page 72 and 73: Add Use PL/SQL Developer to at work
Page 74 and 75: developerPL/SQL PRACTICES BY STEVEN
Page 76 and 77: TIM WEBB technologyPARTITIONING Mor
Page 78 and 79: id column with partitions defined o
Page 80 and 81: JOSEF GAST technologySTORAGE BY JON
Page 82 and 83: DROP TABLE article_draft; RENAME ar
Page 84 and 85: technologySQL DEVELOPER BY SUE HARP
Page 86 and 87: tables after they have been capture
Page 88 and 89: technologyASK TOM On Oracle Databas
Page 90 and 91: this case, if the table T is modifi
Page 92 and 93: Do you belong in the Oracle communi
Page 94 and 95: COMPANY NAME URL COMPANY NAME URL N
Page 96 and 97: commentALL SECURE Automating Securi
Page 98 and 99: Oracle Database Get Better Results
Page 100: Sometimes what’s slowing you down
show all

Oracle Magazine - September/October 2007 - Marcelo Machado

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?