{"id":9306,"date":"2018-07-25T13:12:26","date_gmt":"2018-07-25T17:12:26","guid":{"rendered":"https:\/\/michigan.it.umich.edu\/news?p=9306&#038;preview=true&#038;preview_id=9306"},"modified":"2024-07-08T06:05:50","modified_gmt":"2024-07-08T10:05:50","slug":"eiam-improves-experience","status":"publish","type":"post","link":"https:\/\/michigan.it.umich.edu\/news\/2018\/07\/25\/eiam-improves-experience\/","title":{"rendered":"EIAM Program improves experience for tens of thousands"},"content":{"rendered":"<div id=\"attachment_6881\" style=\"width: 460px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-6881\" class=\"size-full wp-image-6881\" src=\"https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg\" alt=\"computer with login screen\" width=\"450\" height=\"300\" srcset=\"https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg 450w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223-125x83.jpg 125w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223-300x200.jpg 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><p id=\"caption-attachment-6881\" class=\"wp-caption-text\">(Copyright: <a href=\"https:\/\/www.123rf.com\/profile_aaamie\">aaamie \/ 123RF Stock Photo<\/a>)<\/p><\/div>\n<p><span style=\"font-weight: 400;\">The <\/span><a href=\"http:\/\/www.cio.umich.edu\/eiam-program\"><span style=\"font-weight: 400;\">Enterprise Identity and Access Management (EIAM) program<\/span><\/a><span style=\"font-weight: 400;\"> began 18 months ago to improve how people obtain and use accounts to access U-M services. The program came to an official close this summer. The program\u2019s ambitious scope included the entire U-M community\u2014Ann Arbor, Dearborn, Flint, and Michigan Medicine. With members from Information and Technology Services (ITS) and Health Information Technology &amp; Services (HITS) working together, the team sought to reduce pain points and to plan for improvements into the future. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">The EIAM Program coordinated identity and access management efforts for all four U-M campuses to improve and simplify the technology and administrative processes that allow authorized individuals to access U-M resources. The multi-year initiative was jointly funded \u00a0through June 2018 by the Office of the Provost and Michigan Medicine. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;HITS and ITS together made significant strides in strengthening identity and access management governance and processes, while also expanding our understanding of long-term needs to support the entire university community,&#8221; said Nimi Subramanian, program co-director and IS director at HITS. <\/span><\/p>\n<h1><b>Positive impact felt today <\/b><\/h1>\n<ul>\n<li style=\"font-weight: 400;\"><b>15,000+ students, faculty, and staff<em>* <\/em><\/b><span style=\"font-weight: 400;\">joining U-M since October 2017 created their uniqnames using a modernized onboarding process with improved communications, fewer obstacles, and mobile-friendly web design. 23% used a smartphone or tablet to set up their account, a task which was previously recommended only for a computer. <\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><em><span style=\"font-weight: 400;\">(*More specifically, staff and faculty joining the Ann Arbor, Dearborn, and Flint academic campuses; and students joining the Ann Arbor and Flint campuses.)<\/span><\/em><\/li>\n<li style=\"font-weight: 400;\"><b>1,600 students<\/b><span style=\"font-weight: 400;\"> joining UM-Dearborn since October 2017 used a new Uniqname &amp; Account Setup app, which gave Dearborn students the option to select their own uniqname for the first time. <\/span><\/li>\n<li style=\"font-weight: 400;\"><b>34,000+ Michigan Medicine employees <\/b><span style=\"font-weight: 400;\">now enjoy improvements in a number of areas including simpler, automated email communications to new hires that trigger setup of their accounts and passwords, streamlined onboarding processes that cut the number of calls to both ITS and HITS Service Desks, and an enhanced group management tool to manage distribution lists and access to shared network drives.<\/span><\/li>\n<li style=\"font-weight: 400;\"><b>4,600+ people <\/b><span style=\"font-weight: 400;\">use a social account (e.g., Facebook, Twitter, LinkedIn) each month to use resources provided by the Alumni Association or HathiTrust Digital Library. Five additional groups are interested in offering social login for a service soon. <\/span><\/li>\n<li style=\"font-weight: 400;\"><b>22,500+ people<\/b><span style=\"font-weight: 400;\"> on average who reset their UMICH (Level-1) password by contacting the ITS Service Center each year now may reset their password on their own more easily with improved screens, more convenient help links, text message password reset codes, and UMID or birthdate instead of security questions. We are on track this year to see 10,000 fewer password reset requests to the ITS Service Center.<\/span><\/li>\n<li style=\"font-weight: 400;\"><b>1,700 people<\/b><span style=\"font-weight: 400;\"> piloted a new prompt to review and update password recovery information after Weblogin\u2014with the new feature rolling out to the entire U-M community over the coming year.<\/span><\/li>\n<li style=\"font-weight: 400;\"><b>20,000+ people<\/b><span style=\"font-weight: 400;\"> in the College of Engineering (about 20,000 students, faculty, and staff), Shared Services Center (about 60 staff), and UM-Dearborn (about 10 staff) will soon have a small portion of their access managed automatically. <\/span><\/li>\n<\/ul>\n<h1><b>Listened today to impact tomorrow<\/b><\/h1>\n<p><span style=\"font-weight: 400;\">The program team conducted more than 100 interviews with interested groups across the university to better understand current challenges and opportunities for improvement. The knowledge gained from listening to the community was invaluable in setting the right direction for efforts lasting beyond the program\u2019s end date. These efforts include: <\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Recommendations to address concerns about uniqnames include creating email aliases to give people more flexibility, and making uniqnames easier to change when a life event occurs. Longer term recommendations include replacing uniqnames as the primary identifier in systems with a more flexible option. <\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Growing the use of the newly-acquired Identity Governance tool to provide role-based access to all campuses, including Michigan Medicine. Use of the tool requires groups to strategically define who should receive access to what and why, and will be slowly adopted over time.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">A &#8220;bridge&#8221; between the directory systems for the academic campus and Michigan Medicine was designed to more easily share identity and group data in the future. The future technical solution will reliably and accurately pass information between the two directories. <\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Michigan Medicine explored a need for consistently clear and strict controls to help secure data. After establishing a model to analyze data security and conducting a pilot, the team made recommendations to establish and maintain an application database and implement regular internal monitoring and auditing. \u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Recommendations for appropriate steps to verify an individual\u2019s identity before they access university resources based on risk associated with the access.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">While the program is ending, the work to improve how people receive access to the resources they need to contribute to the university\u2019s missions <\/span><span style=\"font-weight: 400;\">of research, education, patient care, and community engagement is not over. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8220;The recommendations and research resulting from the program will be useful to the Identity and Access Management teams in ITS and HITS for years to come. Our teams are looking forward to carrying forward the EIAM vision in ongoing support work and in future projects,&#8221; said DePriest Dockins, program co-director and assistant director of ITS Identity and Access Management.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Role and Access Management Project (RAMP) will continue in ITS as the <\/span><a href=\"http:\/\/cio.umich.edu\/eiam-program\/projects\/role-access-management#earlyadoption\"><span style=\"font-weight: 400;\">Identity Governance Early Adoption project<\/span><\/a><span style=\"font-weight: 400;\"> in FY19. Identity and Access Management teams in ITS and HITS will prioritize and implement recommendations from the EIAM program over time as future projects. <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Enterprise Identity and Access Management (EIAM) program began 18 months ago to improve how people obtain and use accounts to access U-M services. The program came to an official close this summer. The program\u2019s ambitious scope included the entire U-M community\u2014Ann Arbor, Dearborn, Flint, and Michigan Medicine. The team sought to reduce today&#8217;s pain points and to plan for improvements into the future.<\/p>\n","protected":false},"author":27,"featured_media":6881,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","_umich_oidc_access":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_ef_editorial_meta_date_first-draft-date":"","_ef_editorial_meta_paragraph_assignment":"","_ef_editorial_meta_checkbox_needs-photo":"","_ef_editorial_meta_number_word-count":"","footnotes":""},"categories":[7],"tags":[69,251,107,431,106],"class_list":["post-9306","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-projects-services","tag-apps","tag-eiam","tag-password","tag-uniqname","tag-weblogin"],"uagb_featured_image_src":{"full":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg",450,300,false],"thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223-125x83.jpg",125,83,true],"medium":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223-300x200.jpg",300,200,true],"medium_large":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg",450,300,false],"large":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg",450,300,false],"1536x1536":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg",450,300,false],"2048x2048":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg",450,300,false],"excerpt-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223-200x140.jpg",200,140,true],"themonic-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223-60x42.jpg",60,42,true],"ioslider-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223-450x300.jpg",450,300,true],"post-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg",450,300,false],"400x250-crop":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2018\/01\/60230534_s-e1517258397223.jpg",375,250,false]},"uagb_author_info":{"display_name":"Lindsay Hendricks, ITS Communications","author_link":"https:\/\/michigan.it.umich.edu\/news\/author\/lcsteele\/"},"uagb_comment_info":0,"uagb_excerpt":"The Enterprise Identity and Access Management (EIAM) program began 18 months ago to improve how people obtain and use accounts to access U-M services. The program came to an official close this summer. The program\u2019s ambitious scope included the entire U-M community\u2014Ann Arbor, Dearborn, Flint, and Michigan Medicine. The team sought to reduce today's pain&hellip;","_links":{"self":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/9306","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/comments?post=9306"}],"version-history":[{"count":6,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/9306\/revisions"}],"predecessor-version":[{"id":9317,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/9306\/revisions\/9317"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/media\/6881"}],"wp:attachment":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/media?parent=9306"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/categories?post=9306"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/tags?post=9306"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}