New and enhanced IAM services are being developed as part of the IAM Roadmap . The following major projects are currently underway:
IAM Modernization Program
The Identity and Access Management Modernization Program (IAMMP) will guide a set of projects whose goal is to modernize the University’s Identity and Access Management systems, business processes, data management, and technical architecture, as envisioned in the IAM Roadmap. IAMMP includes the implementation of new IAM tools, the transition and/or retirement of legacy IAM tools, and the bridging and integration work required to maintain IAM services as the campus computing landscape transitions during the Administrative Systems Modernization Program. IAMMP will help ensure that the individual projects related to IAM modernization are aligned technically with the new IAM technical architecture and integration strategy, that resources are allocated efficiently across projects, and that cross-project issues are identified and resolved effectively.
UTLogin Stability Roadmap
The UTLogin Stability Roadmap will improve reliability and resilience for the UTLogin authentication service, improve measurement and reporting on Key Performance Indicators (KPIs), and simplify and standardize the UTLogin offering.
The following projects have been deferred for this fiscal year:
Centralized Authentication Resiliency Enhancement (CARE)
The Centralized Authentication Resiliency Enhancement (CARE) project will improve the resiliency of the UTLogin and Shibboleth (SAML) authentication services and the TED (uTexas Enterprise Directory) service by implementing off-campus instances of those services and implementing the required connectivity to enable their use by both on-campus and hosted/cloud systems.
Lightweight Authentication Project
The Lightweight Authentication Project will provide an alternate method of authentication for external users who need to access online university resources. The recommended solution is to make external identities consumable by campus applications using a centrally provided gateway.
The following projects have been completed:
A new two-factor authentication solution based on the Duo Security product was integrated with campus systems. The previous solution, Toopher, was retired in November 2016.
IAM Strategy Project
The Identity and Access Management (IAM) Strategy project provide a roadmap for implementing a comprehensive and full-featured set of IAM services to encourage collaboration, facilitate stakeholder engagement, and support online interactions with a variety of users, while maintaining the security and integrity of the university’s digital assets. The implementation is captured in the IAM Modernization Program.
IAM Technology Selection Project
The IAM Technology Selection Project addressed the selection of a set of enabling IAM technologies for campus in the areas of Identity Administration & Provisioning, Group & Role Management, Authorization Workflows & Repository, Authentication, and Logging & Auditing. The implementation is captured in the IAM Modernization Program.