Oracle improves security at Embry-Riddle

Oct 26 -- Oracle Corp. announced Wednesday that Embry-Riddle Aeronautical University, the institution for aviation and aerospace education, is using Oracle Identity and Access Management Suite as the foundation for its identity management infrastructure.

Oracle's feature-rich software is delivering business value by helping Embry-Riddle improve customer service, implement process improvements and manage more than 60,000 accounts providing faculty, staff, affiliates, students, alumni and applicants secure access to highly sensitive data and applications, Oracle of Redwood Shores, California said.

Embry-Riddle Aeronautical University is an accredited university specializing in aviation and aerospace, and offers more than 30-degree programs in its colleges of arts and sciences, aviation, business, and engineering. The university educates more than 34,000 students annually in undergraduate and graduate programs at residential campuses in Prescott, Arizona, and Daytona Beach, Florida, through the Worldwide Campus at more than 130 centers in the United States, Europe, Canada, and the Middle East, and through online learning, Embry-Riddle said.

Serving as the security backbone for Oracle Fusion Middleware, Oracle Identity Management helps customers and partners decrease security threats across diverse IT environments, while helping address governance, risk and compliance needs, Oracle said. Oracle Identity Management was the fastest growing suite of Identity Management products in 2006, based on total software revenues worldwide, it said.

Oracle Identity Management offers support of industry standards such as WS, XACML (eXtensible Access Control Markup Language) , SAML (Security Assertion Markup Language) and SPML (Service Provisioning Markup Language), which helps customers and partners to more easily integrate applications with the framework, Oracle said. The line includes Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Enterprise Single Sign-On Suite, Oracle Identity Federation, Oracle Virtual Directory, Oracle Internet Directory, Oracle Management Pack for Identity Management and Oracle Web Services Manager, all of which can be used in its entirety or as individual components, Oracle added.

Prior to implementing Oracle Identity Management, Embry-Riddle faced a number of challenges common to higher education institutions, including decentralization of IT resources, siloed security and privacy policies, lack of an enterprise wide system to track employee access to sensitive data, constant changes in user roles and diverse users with multiple affiliations, Oracle said.

To overcome these challenges, Embry-Riddle teamed with Mycroft to design an enterprise-wide identity management infrastructure, Oracle said. After an evaluation process, Embry-Riddle selected Oracle Identity and Access Management Suite to serve as the foundation of its identity management infrastructure. Once the university selected Oracle Identity and Access Management Suite, it took less than seven months to implement the software throughout the entire organization, the company said.

Using Oracle Identity Manager, a component of the Oracle Identity and Access Management Suite, Embry-Riddle can enforce tighter, automated access and management controls around its sensitive data and applications including the Oracle E-Business Suite, its Datatel student information system and Microsoft Exchange, Oracle said.

The university is using Oracle Identity Manager to provision to multiple LDAP (lightweight directory access protocol) directories, including Microsoft Active Directory, Novell eDirectory and Oracle Internet Directory, Oracle said. Oracle Identity Manager has also enabled the university to create a single identity for all users and to more rapidly and automatically provision and de-provision access privileges and requirements as an individual's role changes, the company said.

Previously Embry-Riddle used a manual or batch process to implement nearly 2,000 changes daily, which typically took 24 to 26 hours to complete and resulted in a delay in delivering updates to students, Oracle said. With the use of Oracle Identity Manager, the university can accomplish this same task in less than 30 minutes and provide near real-time updates to its constituents, it said.

As a university, data security and privacy are of paramount concern, Embry-Riddle Aeronautical University said. With its hot-pluggable architecture, Oracle Identity and Access Management Suite has delivered both business and IT benefits by allowing the university to automate and centralize its security processes across heterogeneous systems, while enhancing overall security and improving the user experience for both its internal and external constituents, the university added.

During the next phase of its rollout of a comprehensive identity management strategy, Embry-Riddle plans to implement Oracle Access Manager, another component of the suite, to improve customer service and deliver secure access to its data and systems across its heterogeneous environment, Oracle said.

The software will provide a centralized and automated single sign-on system for managing who has access to specific information systems and applications throughout Embry-Riddle's IT infrastructure, Oracle said. This will allow users to log into the system once and gain access to a range of resources, expanding the single sign-on capabilities beyond those currently offered, with their Oracle Single Sign-On system and further improving security and usability, the company said.

Embry-Riddle also plans to implement delegated administration capabilities to automate the entire process of requesting and granting access to applications, Oracle said. By implementing the delegated administration capabilities of the Oracle Identity and Access Management Suite, Embry-Riddle's data owners can directly manage who gets access to applications without having to rely on the organization's administrative IT staff to manage these functions, it said.

Embry-Riddle worked with Mycroft, a member of the Oracle PartnerNetwork, to implement Oracle Identity and Access Management Suite, Oracle said. Utilizing the suite's standards-based architecture, Mycroft deployed an integrated, flexible and automated identity and access management solution that meets Embry-Riddle's needs today and provides a foundation for its future requirements, it said.

Working closely with Embry-Riddle Aeronautical University, Mycroft has been able to design and deploy an identity and access management strategy, based on Oracle's software, which provides secure access to mission critical resources and applications, Mycroft said. The company is pleased to help the university create a security vision and successfully execute upon that vision, it added.

In addition to its use of Oracle Identity and Access Management Suite with the Oracle E-Business Suite, Embry-Riddle is also using Oracle Application Server and Oracle Portal, which are components of Oracle Fusion Middleware, Oracle Database on Linux and Oracle Real Application Clusters, Oracle said.

www.oracle.com

www.erau.edu