Access authorization 
Access authorization provides timely access throughout the user's life cycle – across multiple environments and security domains – while enforcing security policies and protecting against external threats with:

• Centralized control for consistent execution of security policies across multiple applications and users
• Automation with a policy-based security infrastructure guided by IT requirements and business goals
• Single Sign-On (SSO) to improve the user experience and reduce help-desk costs
• Integration of access and identity management within one infrastructure environment
• Identity federation to share user authentication and attribute information between trusted Web services applications

Products and services:

• IBM Tivoli Identity and Access Manager

  Provides efficient user lifecycle management and access controls for internal and external users. It centralizes security management and automates managing user accounts, access permissions and passwords.

• IBM Tivoli Unified Single Sign-On

  Simplifies and automates sign-on to applications within the organization (enterprise SSO), corporate Web applications (Web SSO), and applications that access resources from another partner (federated SSO).

• IBM Tivoli Identity Manager

  is a leading automated and policy-based user identity management software that helps effectively manage user accounts, access permissions and passwords from creation to termination across the IT environment.

• IBM Tivoli Access Manager for e-business

  acts as the hub for authentication and authorization for Web and other applications, centralizing access management and makes it easy and more cost effective to deploy secure applications.

• IBM Tivoli Access Manager for Enterprise Single Sign-On

  simplifies, strengthens and tracks access by integrating enterprise single sign-on with strong authentication, access workflow automation, fast user switching and audit reporting.

• IBM Tivoli Access Manager for Operating Systems

  protects individual application and operating system resources by addressing system vulnerabilities surrounding UNIX/Linux super user or root accounts.

• IBM Tivoli Federated Identity Manager

  provides user-centric, federated single sign-on to securely share information between trusted partners and simplify application integration using open standards for SOA and Web services deployments across distributed portal and mainframe environments.

• IBM Tivoli Compliance Insight Manager

  provides visibility into an organization’s security compliance posture through automated, enterprise-wide user activity monitoring. It includes dashboard views and reporting to help measure security policy compliance and respond to auditors’ requests.

• IBM Tivoli Directory Integrator

  provides real-time synchronization between multiple disparate data sources so that enterprises can establish an authoritative, up-to-date infrastructure for identity and generic data.

• IBM Tivoli Directory Server

  is an enterprise directory for corporate intranets and the Internet. Tivoli Directory Server serves as the data infrastructure for rapid development and deployment of Web applications, security and identity management.

• IBM Tivoli zSecure suite

  improves organizations’ ability to facilitate security compliance, monitor and audit incidents and automate routine administrative tasks for the mainframe.

• IBM Identity and Access Management Services

  is a comprehensive portfolio of capabilities that covers virtually every aspect of identity management – from identity proofing to user provisioning to access control.

• IBM improving the trust and confidence in identity systems

  IBM’s vision is to bring a new level of trust and confidence to identity systems – how are identities are established, managed and used. Each part of the identity management lifecycle including procedures, workflow and technology, represents a chance to be more efficient and secure, which creates a lower risk, and a more trustworthy environment