Please enable JavaScript.
Coggle requires JavaScript to display documents.
Audience Scoping Framework - Coggle Diagram
Audience Scoping Framework
Identity Types
Cerner Associates
Pre-hire
Active
Terminated
Example, Access to tax records and Cobra
Contignent Workers
Staff Augmentation
Independent Contractor
Outsourcing Services
SOW
EPAM
3rd Parties
Product re-sell
Collaboration between Cerner & Client
VersionOne
O365
Divestures
Non-human
System accounts
Test accounts
Training accounts
Identity Attributes
Vendor (If applicable)
Identity/Employee Type
Partners
Associates
Contingent Workers
Company
Business Unit
Organization
Email
Location
High-risk
Non-high risk
Last Name
M&A type
First Name
Maybe own attribute - High Risk
Components
User Directory
Provisioning service
Policy Decision Point
Conditional Access
Claims Rules
Authoritative Source
Policy Enforcement Point
Azure AD
Active Directory (groups)
ADFS
Business Rules & Policies
Resource/Application
Scope
Resources
Gaps/ Problem Statement
Current identity types doesn't scale with Cerner's evolving business model
Segment population in ways we haven't before
We don't have identity in buckets
Access to applications is open to all identity types with no restrictions
Using consistent policy enforcement point for out application
Lack of defined business/enterprise rules to enforce
Current identity attributes doesn't provide enough information about the type of identity to support desired level of segementation
Identity Scoping Standards
Leave fine grained authorization controls to the Application
Implementation
Federated
Non-Federated
File Shares
Non-internet vs internet facing
Access Methodology
App Proxy
Grouping mechnism
Jim's wise words
Be wary around bleeding over into B2B with 3rd parties.
What's the logic to place people into 3rd parties vs. Contingent Worker? Who owns the identity process
Non-cerner directories, what's the standard set of attribute?
Unique identifier across B2B integration?
Whatever attributes we use for segmentation, it must be applicable to our and partner's identity store