| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 5.67 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
Os grandes retalhistas estão constantemente focados no crescimento dos seus negócios e reconhecem a importância de inovar e definir a melhor solução tecnológica num mercado em constante evolução. A ambição de implementar um sistema ideal tornou-se um desafio sem precedentes para os retalhistas, com o objetivo de melhorar os processos de negócio e compreender o comportamento dos consumidores. Neste sentido, o sistema de retalho (Oracle Retail) oferece vários domínios de produtos que proporcionam melhorias nos processos operacionais e permitem a tomada de decisão adequada, de acordo com as necessidades do mercado, ajudando a organização a obter uma infraestrutura operacional e analítica que a diferencia da concorrência. Para além disso, durante a definição da solução de retalho torna-se necessário seguir boas práticas de segurança da informação para garantir a proteção aos ativos do retalhista, visto que a informação é considerada um recurso fundamental para o sucesso da organização, e essa importância e dependência tem as suas desvantagens, pelo que potenciais riscos de segurança representam ameaças significativas para o negócio. Um elemento-chave do programa de segurança de informação é a implementação de processos de gestão de identidades e acessos, que permitem controlar e restringir o acesso dos utilizadores nos sistemas, assim como assegurar o ciclo de vida das identidades de forma automática sem a intervenção de terceiros. Neste contexto, o objetivo desta tese de mestrado é descrever as atividades realizadas no âmbito do Projeto Autorização, que consiste na integração do sistema de retalho (Oracle Retail) com a plataforma de gestão de identidades e acessos (IBM Identity and Access Management) num grande retalhista internacional. A solução deverá ser capaz de cumprir os seguintes objetivos: Aprovisionamento automático de utilizadores de negócio; Gestão de acessos baseado em função de negócio; Autenticação unificada; Políticas de palavras-passe; Técnicas de criptografia.
Good Retailers are continually focused on growing their core businesses and awareness of the need to innovate and define the best technology solution in a constantly evolving market. The ambition to implement an ideal system has become an unprecedented challenge for retail companies to improve business processes and understand customer’s behavior. In this sense, the retail system (Oracle Retail) offers several products domains that provide operational processes improvements and appropriate decision-making according to the market needs, thereby helping the organization to obtain an operational and analytical infrastructure that sets it apart from the competition. Furthermore, during the retail solution definition, it becomes necessary to follow information security best practices to ensure retailer's data assets protection. Since information is considered a valuable resource for the organization's success, this importance and dependency presents some disadvantages, potential security risks pose significant threats to the business. A key element of the information security program is the Identity and Access Management implementation process, which allows users to control and restrict systems access and assure the identity life-cycle, including automatic provisioning without third-party intervention. In this context, the aim of this master thesis is to describe the activities performed during Authorization Project in a large international retailer, which consists in the integration of the Identity and Access Management platform (IBM) for the Retail System (Oracle). The solution should be able to deliver the following objectives: Automated user-provisioning; Role-based access management; Single Sign-on authentication; Password policies; Encryption techniques.
Good Retailers are continually focused on growing their core businesses and awareness of the need to innovate and define the best technology solution in a constantly evolving market. The ambition to implement an ideal system has become an unprecedented challenge for retail companies to improve business processes and understand customer’s behavior. In this sense, the retail system (Oracle Retail) offers several products domains that provide operational processes improvements and appropriate decision-making according to the market needs, thereby helping the organization to obtain an operational and analytical infrastructure that sets it apart from the competition. Furthermore, during the retail solution definition, it becomes necessary to follow information security best practices to ensure retailer's data assets protection. Since information is considered a valuable resource for the organization's success, this importance and dependency presents some disadvantages, potential security risks pose significant threats to the business. A key element of the information security program is the Identity and Access Management implementation process, which allows users to control and restrict systems access and assure the identity life-cycle, including automatic provisioning without third-party intervention. In this context, the aim of this master thesis is to describe the activities performed during Authorization Project in a large international retailer, which consists in the integration of the Identity and Access Management platform (IBM) for the Retail System (Oracle). The solution should be able to deliver the following objectives: Automated user-provisioning; Role-based access management; Single Sign-on authentication; Password policies; Encryption techniques.
Description
Keywords
Gestão de identidades e acessos Aprovisionamento de utilizadores para soluções Oracle Retail Autenticação Autorização Identity and Access Management Oracle Retail user provisioning, Authentication Authorization