Tivoli Federated Identity Manager

Employ user centric federated access management to enable secure business collaboration in the cloud

Tivoli Federated Identity Manager (TFIM) & TFIM Business Gateway provide secure information sharing between trusted parties with federated SSO + a security token service.

IBM Tivoli Federated Identity Manager provides web and federated single sign-on (SSO) to end users across multiple applications. With browser-based integration and open standards, it can provide quick gains in user productivity, user experience, and reduction in administration costs.

• For enterprises adopting cloud based services, leverage federated single sign on for secure information sharing across private, public and hybrid cloud deployments.
• Leverage the support for the emerging OAuth open standard for authorization and other standards like SAML, OpenID, Liberty, WS-Federation, WS-Securit, WS-Trust to provide employees SSO access to cloud-based applications.
• Implement a powerful identity mediation service for cloud, SaaS, and web services implementation. Reduce administrative costs, establish trust, and facilitate compliance by managing, mapping, and propagating user identities.
• Leverage IBM Tivoli Federated Identity manager Business Gateway for federated SSO which now provides expanded token support to include WS-Federation, Information Card Profile and OpenID in addition to SAML. It also provides a secure token service, supporting WS-Trust, username, SAML, RACF, X590 and Kerberos tokens.
• Employ a comprehensive identity management solution with modular software that supports z/OS® environments as well as entry-level software that enables collaboration with small-to-midsize business partners.
• IBM Tivoli Federated Identity Manager packages IBM Tivoli Federated Identity Manager Business Gateway and IBM Tivoli Access Manager for eBusiness.

Learn more

• More product details (US)

Buy Tivoli Federated Identity Manager

MoreLess

Features, advantages and benefits

Features	Advantages	Benefits
Rather than having to enroll third-party users into a company's internal identity systems, federated identity management enables IT service providers to offload the cost of user administration to their business partner companies	Since the business partner company acts like an identity provider, the service provider does not have to take on the burden of user administration costs such as user enrollment, account management, password management, password reset, help desk, or customer care costs	Helps to reduce administration and provisioning costs: Managing identities for third-party users can be a manual, cumbersome, and costly proposition that depletes critical IT resources
FIM facilitates "straight through processing" techniques because the identity provider does not have to replicate or stage business processes on behalf of a service provider	By employing Tivoli Access Manager for e-business (included with FIM), FIM is able to provide integrated session management, significantly facilitating inter-company transactions. With a federated identity model, identity providers have an opportunity to streamline inter-company transactions, thereby reducing costs, and simplifying integration	Simplified Integration: Integration is simplified because there is a common way to share identities between companies and manage user sessions

• Integrating security between new distributed applications and legacy mainframe applications (e.g. CICS®)

• Improving audit controls for legacy data and transactions served using SOA and Web Services

• Delivering role-based access control for new Web Services

• Leveraging System z® as a first class platform for Application Delivery - via new capabilities in identity management, Web Services and Audit

• Integrating business silos, facilitating mergers and acquisitions, and addressing compliance and governance, to help ensure the success of SOA projects

• Improve user experience and reduce user administration costs by using Federated Single Sign On with customer, partner, agent and/or provider organizations.

• Minimize application impact, through drop-in federation capability

• Allow collaboration with a wide variety of partner organizations, through concurrent support for all leading Federated Single Sign-On protocols

• Integrate audit data collection and reporting.

• Manage identity flow across services and deliver policy-based integrated security management

• Align with open standards and specifications including Liberty, SAML, WS-Federation, WS-Security and WS-Trust.

• Simplify integration between companies and their partners' Web sites, including simplified session management

• Improve business compliance by helping to reduce security exposure

• Expand business reach of service providers creating revenue generating opportunities

• Simplify administration of security in cross-enterprise business processes by delivering "security as services"

• Deliver policy based integrated security management for SOA Web Services

• Best-of-breed integrated solution from a proven vendor

• The proven experience of IBM Global Services security and privacy practice for Tivoli Federated Identity Manager and Tivoli identity management solutions

• Low total cost of ownership

• IT manageability

• Lower user administration and provisioning costs related to identity management

• Simplified integration between companies and their partners' Web sites

• Improved business compliance through reduced security exposure

• Improved end-user experience through Federated Single-Sign-on and Single Sign-off

• Expanded business reach of service providers creating revenue-generating opportunities

• Simplified administration of security in cross-enterprise business processes by delivering "security as services"

• Part of a complete range of solutions for identity management, ranging from user lifecycle management through authentication, authorization and privacy, to the identity infrastructure itself in the form of directory and metadirectory

• Implements key standards and specifications for federated identity management: SAML, Liberty, WS-Federation, and WS-Trust

• Delivered and supported by IBM Tivoli, which is committed to enterprise security, offering a full identity management portfolio, and continuing to strongly influence and drive Federated Identity Management and other security standards

• "Drop-in" federation with minimal impact on applications - providing quicker time to value and greatly reduced ongoing maintenance costs

• Offers attractive per-user tiered pricing model with unlimited user license model for securing e-business

• Is architected for high availability and scalability and is in use by customers to secure federated users numbering in the millions

• A Web services requester is a service client that needs to access a service provider. A Web service requester may be a Microsoft .NET application or a Java or WebSphere application.

• A Web services provider is a service provider that provides a "service" or a component. A Web service provider could be a Microsoft.NET Application or a Java or WebSphere application. Web service providers need to identify, authenticated by service clients.

• Within a SOA environment, there needs to an infrastructure service that simplifies the management of security polices for these various service clients and service providers.

• IBM AIX® 5.2, 5.3, 6.1

• Sun Solaris 9, 10 (SPARC)

• Microsoft® Windows® 2003, 2008, and 2008 R2 Standard Server and Enterprise Server

• Red Hat Linux® Advanced Server 3.0 and 4.0 for IBM System x®

• Red Hat Linux Advanced Server and Enterprise Server 5.0 for System x

• Red Hat Linux Advanced Server 4.0 and 5.0 for IBM System p® and IBM System z®

• SUSE Linux Enterprise Server 9 , 10, and 11 for System p, System x and System z

• HP-UX 11i V2 and V3 on Integrity

• IBM AIX® 5.2, 5.3, 6.1

• Sun Solaris 9, 10 (SPARC)

• Microsoft® Windows® 2003, 2008, and 2008 R2 Standard Server and Enterprise Server

• Red Hat Linux® Advanced Server 3.0 and 4.0 for IBM System x®

• Red Hat Linux Advanced Server and Enterprise Server 5.0 for System x

• Red Hat Linux Advanced Server 4.0 and 5.0 for IBM System p® and IBM System z®

• SUSE Linux Enterprise Server 9 , 10, and 11 for System p, System x and System z

• HP-UX 11i V2 and V3 on Integrity

• Apache Web Server 2.0 and 2.2

• IBM HTTP Server 6.1

• Microsoft Windows Internet Information Server 6.0