Memority
MY-Identity

Inbound provisioning

Memority My-Identity can either be driven by data from your authoritative sources (HRIS, partner repository, CRM…) or act as an authoritative repository (for your service providers, for example). In this way, Memority My-Identity can be fed in a multiple (and not exclusive) ways:

Read more

• Flat file
• Direct reading of authoritative sources via Memority connectors
• Authoritative sources driving Memority directly via its APIs
• By using Memority portal, configured to your needs

Lire moins

Identity lifecycle management

Memority My-Identity supports all processes linked to digital identities: creation, modification, mobility with temporary job overlap, departure, temporary absence, self-registration, change of identity type (from employee to service provider, etc.), right to forget and data consultation.

Read more

All processes can, if required, be subjected to validation workflows with manual data enrichment, or via third-party data repositories for automated enrichment of user attributes.

Lire moins

Entitlement model

Memority My-Identity is based on an extensible role model. It allow the creation of new types of roles, or offers specific views to application managers, using application-specific naming. Application-specific roles can have constraints applied to them, known as “dimensions”, in the objective to scope the application of the role.

Read more

This notion of dimensions makes it possible to manage fine-grained rights in applications or to manage models offering a multitude of rights, in order to limit their technological complexity. The aim is to delegate management to functional managers. In addition, Memority comes with native segregation of duties (SoD) models. Memority also enables your company’s application owners to manage the publication of application roles. This notion of publication defines which users, depending on the organization to which they belong, can request a role, and which workflow will be followed to obtain it.

Lire moins

Advanced delegation and workflow

Memority My-Identity enables different types of organization creation, even multi-dimensional ones, in order to define the delegation model best suited to your company. This delegation model will be used to reduce the visibility scope of your users within the solution, in terms of identities, roles and resources.

Read more

This organization and delegation model is also leverage by the workflow engine to determine the right actor for each step, including escalation. Workflow step forms can be configured to take into account the input of role dimensions (input by several actors if necessary).

Lire moins

Real time provisioning

Each time an identity or one of its authorizations is modified, Memority My-Identity propagates the direct or calculated changes in real time to each of the targets affected. Memority offers connectors for both on-premise and SaaS applications. Memority also offers generic connectors for provisioning any application via flat file, mail, SQL, LDAP, REST API and SOAP Webservice.

Read more

All connectors allow you to create / modify / delete identities, assign rights and even create these rights. Connectors can also read provisioned targets to detect deviations or take account of authoritative attributes.

Lire moins

Role certification

Memority My-Identity offers different types of rights review or re-certification:
• Review by campaign carried out on a given population for one or more roles or resources
• On-the-fly” re-certification: recurring review of an assigned role, triggered automatically at regular intervals, thus avoiding the pitfalls inherent in conventional re-certification campaigns, such as overloading validators.

Read more

• Calculation of deviations from targets: orphan accounts, accounts not complying with defined policies or missing accounts.
All reviews are used to generate reports tracking campaigns, discrepancies and non-conformities.

Lire moins

Consent management

In the case of consumers or partners, it may be necessary to share identity attributes of your consumers or partners with third parties. This can only be done with their consent. Memority My-Identity enables you to manage these consents and store the consent given for each attribute towards partners.

Read more

In addition, consumers or partners can revoke their consent to a third party at any time. All consent-related actions are tracked and reported on within Memority.

Lire moins

Self-service

Memority My-Identity provides end-users with self-service functions, enabling them to create their own account, update their identity data, request additional rights, track the progress of workflows to which they are subject, consult their authentication and access data, and more.

Reporting

Memority My-Identity offers a complete set of identity and access reports. Reports are graphical and dynamic, and can be filtered according to various criteria. Reports are executed on the scope of visibility of the actor concerned. Cross-referencing My-Identity data with My-Access generates additional value for your administrators and auditors.