Digital Identity by Deloitte

Managing the life cycle of user passwords. This includes policy-based password rules, securely storing and transmitting passwords, and offering users intuitive processes for recovering lost or forgotten passwords.

Securing access to applications, systems, and services using authentication and authorization services. Applications may be web-based, desktop-based, or mobile. Services may include application programming interfaces (APIs) or web services that need securing. Access management often involves improving the user access experience through single sign-on or federation to social/government login services.

Protecting critical assets by enforcing least privilege and providing vaulted credential storage management and secure access to endpoints with session monitoring, reporting, and auditing. With the privileged access management (PAM) approach, organizations can securely manage these accounts to mitigate risk and provide a log or activity trail/nonrepudiation.

Providing access privileges that are effectively managed, monitored, and controlled throughout an organization’s IT environment. Access management plays a vital role in safeguarding sensitive data, preventing unauthorized access, and addressing regulatory compliance.

Managing the user life cycle, including roles, privileges, and other related areas. Identity administration includes synchronizing identity information from trusted sources and creating and maintaining user accounts in applications and systems.

Providing user access based on roles. Roles and their associated access are defined and managed, allowing access to be granted to users automatically based on defined rules, which helps to achieve consistency and standardization for user access.