Case Study Dir XML Implementation at Waste Management

Case Study: Dir. XML Implementation at Waste Management Rick Wagner Systems Engineer Novell, Inc.

The one Net vision 2 © March 18, 2004 Novell Inc.

The one Net vision 3 © March 18, 2004 Novell Inc.

Company Background

Company Information Waste Management, Inc • HQ: Houston, Texas • Employees: – 55, 000 full time – 10, 000 - 15, 000 contractors As the leading provider of comprehensive waste management services, Waste Management serves municipal, commercial, industrial and residential customers throughout the United States, Canada and Puerto Rico. 5 © March 18, 2004 Novell Inc.

The Situation History • • Significant growth in 1998 through 2000 Acquired an average of one company per day Each acquisition was run independently No central application suite Business Drivers • • 6 High level and Consistency of Customer service Business process enabling Single sign on Consistent application of security policies © March 18, 2004 Novell Inc.

Formulating a Solution

The Solution Novell Dir. XML/e. Directory • e. Directory 8. 7 and Dir. XML 1. 1 a People. Soft Enterprise Portal • Enterprise Portal 8. 4, Upgrading to 8. 8 • HR 7. 5 (Upgrading to HR 8. 8) • Financials 8. 4 (Upgraded from Financials 7. 5) Netegrity Site. Minder • 8 Policy Server 5. 5 SP 1 © March 18, 2004 Novell Inc.

Components That Make Up the System Netegrity’s Site. Minder supplies single sign on authentication and policy based resource authorization IBM HTTP (Apache) and IIS Web Servers serve the applications Site. Minder e. Directory is the Meta Directory Dir. XML is the glue used for aggregating and synchronizing users and application roles 9

Automated User Provisioning Users created in Active Directory and pushed to Meta Directory by Dir. XML As Active Directory account (including password) is updated the change is automatically pushed to user’s account in e. Directory Near Future – synchronize user information in People. Soft HR with Meta Directory Future – automated security assignments 10 © March 18, 2004 Novell Inc.

Synchronized Role Based Access Control People. Soft security is maintained in the applications (Permission Lists) Application roles pushed to the Meta Directory using Dir. XML User’s role assignment(s) maintained in Meta Directory 11 © March 18, 2004 Novell Inc.

Centralized Security Administration Separation of roles from application access control management Delegated administration Consistent application of corporate security policies Consistent interface minimizes training 12 © March 18, 2004 Novell Inc.

Implementing the Solution

Putting It All Together 14

Security Process 15

Software Configuration 16

General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. Novell, Inc. , makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. , reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All Novell marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of Novell, Inc. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability.