Table of Contents
Advertisement
Identity Integration
1 6
Sentinel
6.1 Rapid Deployment provides an integration framework for identity management
TM
systems. This integration provides functionality on several levels:
Identity Browser provides the ability to look up the following information about a user:
Contact information
Accounts associated with that user
Most recent authentication events
Most recent access events
Most recent permissions changes
Identity Browser lookup from events
Reports and correlation rules provide an integrated view of a user's true identity, even across
multiple systems on which that user has separate accounts. For example, accounts like
NOVELL\testuser; > cn=testuser,ou=engineering,o=novell, and TUser@novell.com can be
mapped to the actual person who owns the accounts.
By displaying information about the people initiating a given action or people affected by an action,
incident response times are improved and behavior-based analysis is enabled.
®
Novell
provides an optional integration with Novell Identity Manager. The screenshots and
descriptions in this section are based on Novell Identity Manager.
Sentinel 6.1 Rapid Deployment synchronizes identity information with major identity management
systems and stores local copies of key information about each Identity. The following table
summarizes the commonly used information provided:
Identity Information
Table 16-1
Name
AccountGUID
Name
ID
Authority
Status
IdentityGUID
Description
Auto-generated internal ID.
Username that references the account, generally provided by the user to log
in.
The numeric or other identifier that represents the account in the event
source. This ID is used for resolution when the username is not available.
The realm within which this account is unique. Collectors calculate the realm
based on event information.
The status of the account.
A reference to the identity that owns this account.
16
Identity Integration
369
Advertisement
Table of Contents
