Manufacturing Company Secures Database with Oracle Key Vault

In order to meet audit compliance and prepare for GDPR, this manufacturing company implemented Oracle Key Vault to increase the security and manageability of their encrypted databases.

Company Overview

A multinational manufacturing company providing services to various markets, employing over 100,000 workers in hundreds of locations around the world.

Business Challenge

Already a heavy user of Oracle database and the E-Business Suite (EBS) application, client had begun implementing Transparent Data Encryption (TDE), starting with their EBS HR system. They were looking to enhance the security, reliability and manageability of their TDE implementation prior to rolling out to other databases. Without central key management, consistently managing keys across RAC clusters, DR environments and cloned copies was challenging.

Solution

Closely aligning with Oracle and client teams, Hub City Media implemented Oracle’s Key Vault product. By externalizing the database keys using the product, the client was able to achieve enhanced separation of duties and auditing of key management actions. Best-practice procedures like key rotations can now be performed regularly with no impact on operations.

Results

By implementing Key Vault’s latest version (12.2.0.5), the client benefited from enhancements to high-availability architecture and system management, drastically decreasing their cybersecurity risk.

Power Company Upgrades to OIM 11gR2

Company Overview

A large holding company for several power and energy companies in the midwestern United States. Located in St. Louis, the organization serves over 3.4 million customers in Illinois and the surrounding area.

Business Challenge

Federal regulations (NERC) require that all power companies install security measures to protect their critical assets to the power grid. In compliance with these regulations, the client planned to replace Sun Identity Manager due to it’s service “end-of-life”, and chose Oracle to serve as their IdM platform for the future.

Hub City Media's Solution

Hub City Media was hired to complete the OIM 11gR2 implementation, which set the client up with a secure foundation for an updated, simplified identity management system. OIM's new functionality enabled the client to meet the strict federal standards and decrease the time-consuming customization process currently in place.

Results

The installation of OIM 11gR2 was completed in four months. The time-consuming customization process was replaced by simple customizations in OIM, and the careful OIM implementation and coexistence strategy designed by Hub City Media will simplify the SIM to OIM migration to come.

Technology Company Implements Oracle IAM Stack

When An Acquisition’s Demands Exceeded The Capabilities Of Their Home Grown IAM System, This Large Mobile Technologies Company Replaced It With Oracle’s IAM Product Suite, Simplifying Provisioning, Consolidating Directories, And Securing Access With A Platform Capable Of Scaling For Future Acquisitions.

Company Overview

A mobile technology company that allows telecommunications companies to interoperate. They provide services such as roaming, messaging, and business intelligence solutions to mobile service providers around the globe.

Business Challenges

The client's homegrown identity management system, OARS, was reaching the limits to its capacity. The acquisition of a technology company (MACH) doubled the number of users, added directories and pushed the system beyond its limits. The client needed to replace OARS with a system capable of meeting their current IAM needs and able to scale to their growing workforce.

Hub City Media's Solution

The client selected Hub City Media to implement the complete Oracle identity management stack. The project is being implemented in phases: Replacing OARS with Oracle Identity Manager (OIM), Implementing Oracle Virtual Directory (OVD) to connect the multiple directories, and Implementing Oracle Access Manager (OAM) and Oracle Identity Analytics (OIA) to safely manage access controls.

Results

The client has met the demands of the MACH acquisition by replacing their homegrown IAM system with Oracle’s IAM product set. The company can now efficiently provision new users, consolidate their multiple directories, and secure access with Oracle’s scalable, high performance IAM system.

Oracle IAM Product Set Reconfiguration

Faced With The Affordable Care Act Deadline To Provide A Healthcare Portal Secured With Oracle Identity Management, This Northeastern State Avoided A Costly And Lengthy Migration Utilizing A Sun / Oracle Coexistence Strategy.

Company Overview

The largest department of government in a northeastern US state, responsible for the Medicaid program, child welfare, public health, disabilities, veterans’ affairs, and elder affairs.

Business Challenges

As part of the larger project in 2011 to deliver a fully functional healthcare portal for their state's residents, the client was given two years to implement an Identity and Access Management (IAM) system to control access and protect vulnerable information. With the Sun IAM stack currently in place, and premier support reaching end-of-life in 2014, the northeastern state was faced with the challenge of migrating to an updated IAM platform with minimal downtime, without continued spend on the legacy IAM system. The client chose to implement the entire Oracle IAM stack with the existing Sun IAM stack in a coexistence architecture but after 18 months effort, was quickly running out of time.

Hub City Media's Solution

With only 6 months left, Hub City Media was hired to redesign a Sun/Oracle coexistence IAM system, to secure the healthcare portal before the deadline. The clients IAM system leverages the approval and access policies for 50 applications already existing in SIM while OIM provides account provisioning for users and administrators. OAM and OIF are used across applications for providing Single Sign On (SSO) and Federation between the customer's IAM environment and the HIX environment. 

Results

Hub City Media completed the implementation by the 2014 deadline, and the client immediately began developing on the Oracle IAM system in coexistence with Sun IAM. The northeastern state simplified user management with the configuration of OIM and OAM, and with the client’s coexistence strategy in place, they were able to finalize a statewide secure healthcare portal.

SIM / OIM Coexistence Completed with Identity Bridge

Faced With The Task Of Migrating Their Provisioning System From Sun To Oracle, This Large Midwestern Automotive Company Avoided A Costly And Lengthy Migration By Implementing A True Coexistence Solution, Identity Bridge.

Company Overview

One of the largest automobile organization in North America, providing membership, travel, insurance, and financial services to 8.5 million members across 11 states.

Business Challenge

The client was previously using Sun Identity Manager (SIM) to provision internal and external users. The merger of two automobile companies added 9,000 internal and 10,000 external users to their provisioning system. With SIM end-of-life for premier support approaching in 2014, the client was struggling to manage the time sensitive provisioning needs of new users while shifting spend away from SIM. They needed to provision new users on an updated IdM platform that coexists with their current system, in order to efficiently manage the nearly 20,000 new users and passwords. 

Hub City Media's Solution

The client selected Oracle Identity Manager as their new IdM platform to be implemented using Hub City Media’s coexistence solution, IdentityBridge. Hub City Media implemented OIM 11gR2 and installed IdentityBridge to enable the automobile organization's 68 connected systems to coexist between SIM and OIM. With IdentityBridge in place, the client can leverage SIM connectors, workflows, policies, and roles in SIM while developing functionality in OIM, and shift spend from Sun to Oracle. This will enable the client to migrate from SIM to OIM at their own pace, or coexist indefinitely. For more information on IdentityBridge, contact sales@hubcitymedia.com.

Results

The client is now able to manage their new workforce with a provisioning solution that automates password management and provides a centralized catalog of account access, roles, and entitlements for simplified request management. The out-of-the-box functionality of IdentityBridge puts control back into the hands of the client,  allowing them to immediately begin provisioning the 20,000 new users on OIM while leveraging SIM workflows, shift spend from SIM to OIM, and migrate continuing workflows from SIM to OIM at their own pace. 

Access Management for Mobile Devices

Preventing A Decline In Productivity Of A Mobile Workforce Unable To Access Corporate Data, This Global Pharmaceutical Company Provided Mobile Device Access To 12 Critical Applications Without Compromising Data Security.

Company Overview

A global healthcare company with 90 years of innovation and leadership in diabetes care with approximately 38,000 employees in 75 countries, and marketing its products in more than 180 countries.

Business Challenges

The client's 3,000 mobile US workforce required secure mobile access to corporate data in order to work productively with clients in the field. Its single sign on solution, Open SSO, was unsupported and unable to provide mobile access. With 12 applications utilizing Open SSO, and more to be onboarded, the client needed an updated access management solution to provide single sign-on and simplify their IAM infrastructure.

Hub City Media's Solution

The client selected Hub City Media to install and configure Oracle Access Manager (OAM), Oracle Access Manager Mobile & Social (OAMMS), and Oracle Identity Federation (OIF) to enable single sign-on, session management, and centralized policy administration on IOS or Windows Native Authentication (WNA) devices. Also installed was Oracle Virtual Directory (OVD) to present a single unified LDAP view of credentials and data from existing Oracle Directory Server Enterprise Edition (ODSEE) and Microsoft Active Directory (AD) servers.

Results

With OSSO replaced by the Oracle Identity and Access solution, the client provides secure access and single sign-on to 12 critical applications on IOS and Microsoft devices. This enabled its mobile workforce to effectively work with clients in the field and improve productivity.

Single Sign-on with Oracle Access Management

Faced With The User Frustration And Security Concerns That Arise From Managing Up To 25 Different Access Credentials, This Large Southern Power Company Implemented A Single Sign On (SSO) Solution To Provide Secure Access For 2500 Employees.

Company Overview

A growing independent oil and gas company, headquartered in Texas. With over 2500 employees, this company focuses on the exploration, development, and production of natural gas across the United States.

Business Challenges

The client is currently providing their users access to over 25 corporate applications that host sensitive information and require secure access controls. With no single sign-on (SSO) system in place, users were required to remember usernames and passwords for each application. This results in user frustration and ultimately increases security risk as users adopt insecure ways to store credentials they cannot remember.  Nineteen of the company’s critical corporate applications were considered high-priority, and the customer needed to simplify and secure the user experience of accessing these critical applications by implementing a single sign-on (SSO) solution.

Hub City Media's Solution

The client selected the Oracle Access Management suite to provide SSO for the company’s 19 high priority corporate applications. Hub City Media installed and configured Oracle Access Manager (OAM), Oracle Identity Federation (OIF), and Oracle Enterprise Single Sign-on (eSSO). The products were integrated with the customer's existing environment, including their user credential store, Microsoft Active Directory, and Windows Native Authentication. EBS was also configured for web-based SSO, and 4 external applications were configured for SAML federation.

Results

Using the Oracle solution, the customer provides Single Sign On access to 25 critical web based, desktop and external applications. The installation and configuration of Oracle product set was in production in five months, providing the customer with a simple and secure single sign-on solution that increases access security and eliminates user frustration.

Directory Upgrade to ODSEE 11g

With Their Sun Directory (DSEE) Approaching End-Of-Life, This Midwestern Financial Holding Company Upgraded To Oracle ODSEE 11g, Meeting All Compliance Standards And Reducing Costs Through Data Center Consolidation.

Company Overview

A bank holding company located in Detroit, Michigan. The company provides financial services, including insurance, mortgage services, auto financing, and online banking, to over 15 million customers.

Business Challenges

The client had implemented Sun Directory Server Enterprise Edition (DSEE) 5.2 to support 4 applications for user authentication and authorization. Oracle’s premier support for this product reached end-of-life in 2013, requiring the financial organization to implement a supported directory system or risk the potential consequences of an audit failure.  Due to the size and complexity of the organization, the client needed to implement a supported directory system with minimal downtime, consolidate their directory instances and consolidate data centers.

Hub City Media's Solution

The client selected Oracle Directory Server Enterprise Edition (ODSEE 11g) as their new directory system, and hired Hub City Media to perform the implementation. The previous directory system, Sun DSEE 5.2 was upgraded to ODSEE 7, the multiple directory instances were consolidated, and the implementation was carefully executed to allow access without modification to existing applications.

Results

The client's updated directory system was up and running ahead of schedule, protecting the company from potential compliance issues, and avoiding disruption the business due to the minimized downtime. The many directory instances of Sun DSEE were consolidated, simplifying the company’s environment, and reducing costs of maintaining multiple data centers.

Directory Upgrade to Oracle Unified Directory

With Support Ending For Their Aging Directory System, This Large Mortgage Company Migrated 450 Applications To Oracle Unified Directory In Four Months, Maintaining FISMA Compliance With A Performant, State Of The Art And Supported Directory Infrastructure.

Company Overview

A large government-sponsored enterprise providing residential mortgage credit in the secondary market. the company purchases loans from mortgage lenders to give families the opportunity to buy homes, refinance, or rent homes.

Business Challenges

The client was using Sun DSEE as their corporate directory system, supporting 450 critical business applications. Sun DSEE is reaching support end-of-life and FISMA standards require all government agencies to maintain a supported directory system. This mortgage company needed to quickly migrate to a new, efficient and supported directory system while consolidating several directory instances to one.

Hub City Media's Solution

The client selected Oracle Unified Directory as their new directory system, and Hub City Media designed the migration to reduce the number of directory instances with minimal downtime, and to ensure that the 450 applications that accessed LDAP were not impacted during the process. This was one of the largest directory upgrades seen by the Oracle/Hub City Media team.

Results

With Oracle Unified Directory in place, the client has provided a supported IT environment and has avoided all potential compliance issues. Their multiple directory instances were consolidated, simplifying their directory environment, and the 450 applications are now accessing a high performance, feature rich directory.