Name: | Description: | Size: | Format: | |
---|---|---|---|---|
5.67 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
Os grandes retalhistas estĆ£o constantemente focados no crescimento dos seus negócios e reconhecem a importĆ¢ncia de inovar e definir a melhor solução tecnológica num mercado em constante evolução. A ambição de implementar um sistema ideal tornou-se um desafio sem precedentes para os retalhistas, com o objetivo de melhorar os processos de negócio e compreender o comportamento dos consumidores. Neste sentido, o sistema de retalho (Oracle Retail) oferece vĆ”rios domĆnios de produtos que proporcionam melhorias nos processos operacionais e permitem a tomada de decisĆ£o adequada, de acordo com as necessidades do mercado, ajudando a organização a obter uma infraestrutura operacional e analĆtica que a diferencia da concorrĆŖncia. Para alĆ©m disso, durante a definição da solução de retalho torna-se necessĆ”rio seguir boas prĆ”ticas de seguranƧa da informação para garantir a proteção aos ativos do retalhista, visto que a informação Ć© considerada um recurso fundamental para o sucesso da organização, e essa importĆ¢ncia e dependĆŖncia tem as suas desvantagens, pelo que potenciais riscos de seguranƧa representam ameaƧas significativas para o negócio. Um elemento-chave do programa de seguranƧa de informação Ć© a implementação de processos de gestĆ£o de identidades e acessos, que permitem controlar e restringir o acesso dos utilizadores nos sistemas, assim como assegurar o ciclo de vida das identidades de forma automĆ”tica sem a intervenção de terceiros. Neste contexto, o objetivo desta tese de mestrado Ć© descrever as atividades realizadas no Ć¢mbito do Projeto Autorização, que consiste na integração do sistema de retalho (Oracle Retail) com a plataforma de gestĆ£o de identidades e acessos (IBM Identity and Access Management) num grande retalhista internacional. A solução deverĆ” ser capaz de cumprir os seguintes objetivos: ļ§ Aprovisionamento automĆ”tico de utilizadores de negócio; ļ§ GestĆ£o de acessos baseado em função de negócio; ļ§ Autenticação unificada; ļ§ PolĆticas de palavras-passe; ļ§ TĆ©cnicas de criptografia.
Good Retailers are continually focused on growing their core businesses and awareness of the need to innovate and define the best technology solution in a constantly evolving market. The ambition to implement an ideal system has become an unprecedented challenge for retail companies to improve business processes and understand customerās behavior. In this sense, the retail system (Oracle Retail) offers several products domains that provide operational processes improvements and appropriate decision-making according to the market needs, thereby helping the organization to obtain an operational and analytical infrastructure that sets it apart from the competition. Furthermore, during the retail solution definition, it becomes necessary to follow information security best practices to ensure retailer's data assets protection. Since information is considered a valuable resource for the organization's success, this importance and dependency presents some disadvantages, potential security risks pose significant threats to the business. A key element of the information security program is the Identity and Access Management implementation process, which allows users to control and restrict systems access and assure the identity life-cycle, including automatic provisioning without third-party intervention. In this context, the aim of this master thesis is to describe the activities performed during Authorization Project in a large international retailer, which consists in the integration of the Identity and Access Management platform (IBM) for the Retail System (Oracle). The solution should be able to deliver the following objectives: ļ§ Automated user-provisioning; ļ§ Role-based access management; ļ§ Single Sign-on authentication; ļ§ Password policies; ļ§ Encryption techniques.
Good Retailers are continually focused on growing their core businesses and awareness of the need to innovate and define the best technology solution in a constantly evolving market. The ambition to implement an ideal system has become an unprecedented challenge for retail companies to improve business processes and understand customerās behavior. In this sense, the retail system (Oracle Retail) offers several products domains that provide operational processes improvements and appropriate decision-making according to the market needs, thereby helping the organization to obtain an operational and analytical infrastructure that sets it apart from the competition. Furthermore, during the retail solution definition, it becomes necessary to follow information security best practices to ensure retailer's data assets protection. Since information is considered a valuable resource for the organization's success, this importance and dependency presents some disadvantages, potential security risks pose significant threats to the business. A key element of the information security program is the Identity and Access Management implementation process, which allows users to control and restrict systems access and assure the identity life-cycle, including automatic provisioning without third-party intervention. In this context, the aim of this master thesis is to describe the activities performed during Authorization Project in a large international retailer, which consists in the integration of the Identity and Access Management platform (IBM) for the Retail System (Oracle). The solution should be able to deliver the following objectives: ļ§ Automated user-provisioning; ļ§ Role-based access management; ļ§ Single Sign-on authentication; ļ§ Password policies; ļ§ Encryption techniques.
Description
Keywords
Gestão de identidades e acessos Aprovisionamento de utilizadores para soluções Oracle Retail Autenticação Autorização Identity and Access Management Oracle Retail user provisioning, Authentication Authorization