Case Studies
DSA News Briefs
Events
Press Releases
Publications
|
Case Studies
Merck Single Sign-On Feasibility Study
ISSUE
Merck was tasked with developing a robust scalable single sign-on (SSO) solution that addressed:
• SSO capability for Merck's internally developed applications
• SSO support for Merck and affiliate organization sites
• Centralized access management of Web content for secure administrative efficiency
• A flexible solution that will support the current Merck infrastructure architecture and system and will support new requirements
While Merck's current technology supported SSO there were issues as to compatibility, scalability and interoperability. Questions arose regarding the interface with Lotus Domino, tailoring of applications and adaptation of the infrastructure.
SOLUTION
Merck looked to DSA to provide solution(s) to support their objectives. DSA was tasked with the initial project of a feasibility study and white paper. DSA viewed this initiative as a 3 phase process.
Phase 1 - Conceptual feasibility study - The study addressed issues such as:
• How can this be accomplished with the current architecture?
• What, if any, changes must be made to achieve the objectives?
• Is there a better product, other than the one currently being used, to support Merck's immediate needs?
Phase 2 - Provide a Pilot program - Proposed implementation of a centralized access management system with SSO capability, on a sampling of Merck's architecture.
Phase 3 - Enterprise Implementation - Using the experience of Phase 2, an enterprise wide SSO and centralized access management solution was proposed.
RESULTS
DSA's feasibility study provided Merck with the ability to address their Single Sign-On questions and concerns, evaluate their options and make informed business decisions on how to proceed with their Single Sign-On initiative. Ultimately, this study leads to simplified password and access control and provides a higher level of protection for intellectual assets. It also opens the door for centralization of access control utilizing Single Sign-On.
|
|
|
