Oracle Revamps ID Management Tools

The database specialist releases the latest version of its systems access and control applications, boasting improvements in its IT resources provisioning, password management and directory services functions.

Oracle released an updated version of its user authentication package on Aug. 16, adding a range of tools gained via the companys acquisitions and its work to build additional security measures into other products.

The database giant says that the updated authentication suite—called Oracle Identity Management 10g Release 3—better addresses the end-to-end process of creating, assigning and managing systems access tasks, helping customers streamline their operations and simplify regulatory compliance. The package includes applications meant to oversee IT systems access control, identity administration, user provisioning and directory services capabilities.

Described by the company as "the security backbone" for its Oracle Fusion Middleware, the package specifically includes the software makers Identity Manager, Access Manager, Virtual Directory, Internet Directory, Enterprise Single Sign-On Suite, Identity Federation and Web Services Manager products.

Many of the improvements offered in the latest iteration of the identity management suite were derived from Oracles acquisitions of high-profile enterprise software makers such as PeopleSoft and Siebel Systems, according to the Redwood Shores, Calif.-based database specialist. Along with software systems made by those companies, the Identity Management 10g Release 3 can also be plugged directly into enterprise software made by Oracle rival SAP.

Specific modifications to the package include new ID auditing and compliance management tools built into the Identity Manager module, which was formerly known as Oracle Xellerate Identity Provisioning. Additions to the Access Manager, formerly labeled as Oracle COREid Access and Identity, include advanced password management capabilities and so-called "shared-secret" enhancements, which aim to improve security between software components by allowing the programs to pool related information.

/zimages/1/28571.gifIT executives say efforts to improve electronic identity management are still in their nascent stages. Click here to read more.

In the Oracle Virtual Directory, the company added new auditing and reporting features, and extended configuration support to IBMs Tivoli products and Microsoft Active Directory. The Internet Directory Services component offers tighter password synchronization with Active Directory and support for Novells eDirectory products. The company said that Oracle Identity Federation, formerly known as Oracle COREid Federation, adds enhanced support for the SAML 2.0 and WS-Federation authentication standards.

Identity Management 10g Release 3 also adds support for 28 different languages.

Oracle officials said that enterprises are looking for integrated authentication and identity management applications because the demands of supporting products from multiple vendors have become a headache.

"Customers are looking for a comprehensive identity management software platform that can be implemented via a single license and supported by a single vendor," Hasan Rizvi, vice president of Identity Management development at Oracle, said in a statement. "Oracle Identity Management 10g Release 3 provides customers with an identity platform that increases business agility and helps to reduce costs and to achieve regulatory compliance so that enterprises can get the most from existing and future IT investments."

/zimages/1/28571.gifCheck out eWEEK.coms for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at Security Center Editor Larry Seltzers Weblog.