IAM Archives - Anuj Varma, Hands-On Technology Architect, Clean Air Activist

Identity and Access Management

Anuj Varma — Sat, 10 Feb 2018 00:10:50 +0000

Anuj, with his application architecture background (22 years), coupled with cloud architecture (the last 12 years), has helped companies:

Create an overall consolidation strategy for your firm, accounting for all your I.T. assets – including your legacy applications.
Include a comprehensive migration and security strategy, including network and application security, to ensure complete protection of data and systems on each app tier.
Refactoring Existing Apps into Microservices, Containerization strategies and more…
Identity Access Management in the Cloud

Anuj, as an independent IAM cloud consultant in Austin, TX, helped develop a comprehensive IAM strategy – including adaptive, multi-factor authentication and SSO for multiple applications. His architecture included on-prem data center assets such as VPN/RDP farms as well as custom business web apps (SalesForce, ASP.NET/IIS apps). Anuj has worked with a variety of IAM providers included Google Cloud, AWS, Azure AD, Okta and Sailpoint.

Anuj was the technical lead in migrating over 200 on-prem applications to the cloud for an agency in Austin, TX.
Attack Vectors. Intrusion Prevention, Common Attacks, Social Engineering Attacks
OWASP Seminar Training Top 10 – Cross Site Scripting , Request Forgery, SQL Injection, Character Encoding, Session Hijacking, Authentication, Authorization loopholes
Best Practices to Secure your Web Applications – in the Cloud, On-Premises
Web Services Security and Identity and Access Management
Securing SOAP and RESTFul Services using IAM –Identity and Access Management
Securing Middleware, EAI and Messaging Systems – using Identity and Access Management
Securing your devops pipeline, including CHEF Servers – Identity Access Management for Devops
Securing your network, hybrid cloud, VPCs, Subnets, Security Groups – The primary use case for Identity and Access Manaagement
IAM in Azure, AWS and Google Cloud IAM – Identity Access Management in the Public Cloud – Compared.

Find out how you can hire Anuj for your Identity and Access Management needs.

Anuj Varma — Mon, 05 Feb 2018 20:32:46 +0000

O365 has a slightly different MFA than Azure AD.

Azure AD MFA
— Go into Azure Portal–> AD –> Users — > enable MFA per user –> Service Settings (allow users to create app passwords, for apps that don’t support MFA)
— Users can be sent to a URL to set up their own MFA setting
— Azure Charges Per User (not per SMS etc.),
— Can manage MFA in office vs. Out of office – by adding trusted IPs in Azure dashboard

MFA Overview

One Time Password is used when your regular MFA device fails (say you lose your phone).

Anuj Varma — Wed, 19 Jul 2017 20:35:00 +0000

Some notes from the field

Workflows are Developer friendly, not admin friendly. Steep learning curve for IIQ Workflows.
Access Certifications – Access certifications are one of the best features in IdentityIQ. You will be able to approve and extend employee’s access to different applications periodically and it reduce the risk of unnecessary long time accesses to the applications.
RBAC -Role-base access control feature in IdentityIQ. It helps you to find out the existing roles in the systems and assign access to those roles.
Directory Services Missing – IdentityIQ does not have a directory service built in, it is dependent to other directories.
Having Single Sign on would be a great improvement.
IQ Connectors – Although they are adding more and more connectors to IdentityIQ, several apps currently lack connectors.
Password Workflow – It’s great for people who forget their Windows password a lot, especially if you have a password policy that requires constant changes. IIQ allows the user to select “forgot password?” on the Windows login.
Admin Ease of Password Management – It’s great for administrators because now they can admin a user’s accounts all in one spot instead of keeping records across several pieces of software.