IBM Tivoli Access Manager
{{Short description|Corporate web services authentication system}}
{{Multiple issues|
{{Third-party|date=March 2024}}
{{refimprove|date=February 2008}}
}}
IBM Tivoli Access Manager (TAM) is an authentication and authorization solution for corporate web services, operating systems, and existing applications.http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.itame.doc/am61_admin18.htm#choverview {{dead link|date=April 2025}}{{Cite web |last=Gimbel |first=Erika |date=25 September 2018 |title=How Identity Management Tools Help States Solve Thorny Security Issues |url=https://statetechmagazine.com/article/2018/09/how-identity-management-tools-help-states-solve-thorny-security-issues |access-date=2024-03-17 |website=StateTech |language=en}}{{Cite journal |last=Karjoth |first=Günter |date=2003-05-01 |title=Access control with IBM Tivoli access manager |url=https://doi.org/10.1145/762476.762479 |journal=ACM Transactions on Information and System Security |volume=6 |issue=2 |pages=232–257 |doi=10.1145/762476.762479 |issn=1094-9224|url-access=subscription }} Tivoli Access Manager runs on various operating system platforms such as Unix (AIX, Solaris, HP-UX), Linux, and Windows.
It has been renamed as IBM Security Access Manager (ISAM), in line with the renaming of other Tivoli products, such as TIM turned ISIM.
In 2002, IBM acquired Access360 software, which it planned to integrate into Tivoli Access Manager.{{Cite web |last= |date=4 Sep 2002 |title=IBM acquires Access360 for identity management |url=https://www.theregister.com/2002/09/04/ibm_acquires_access360_for_identity/ |access-date=2024-03-17 |website=www.theregister.com |language=en}} In 2009, IBM and Fujitsu announced a partnership to integrate Fujitsu's biometric authentication technology into TAM.{{Cite web |last=Chickowski |first=Ericka |date=2009-12-18 |title=IBM, Fujitsu Take Biometrics Up a Notch |url=https://www.channelinsider.com/news-and-trends/ibm-fujitsu-take-biometrics-up-a-notch/ |access-date=2024-03-17 |website=Channel Insider |language=en-US}} Comparable products from other vendors include Oracle Access Manager, CA SiteMinder, NetIQ Access Manager and SAP NetWeaver Single Sign-On.{{Cite web |date=2013-06-25 |title=Identity Management Product Vendor / Matrix |url=https://www.mandsconsulting.com/identity-access-management-vendor-product-matrix/ |access-date=2024-03-19 |website=M&S Consulting |language=en-US}}
Core components
TAM has two core components, which are the foundation upon which its other features are implemented:
- A user registry.http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.itame.doc/am61_admin65.htm#wq70 {{dead link|date=April 2025}}
- An authorization service consisting of an authorization database and an authorization engine that performs the decision-making action on the request.http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.itame.doc/am61_admin32.htm#wq34 {{dead link|date=April 2025}}
Another related component is the resource manager, which is responsible for applying security policy to resources. The policy enforcer component directs the request to the authorization service for evaluation.http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.itame.doc/am61_admin28.htm#i1045612{{dead link|date=April 2025}} Based on the authorization service result (approval or denial) the resource manager allows or denies access to the protected resources. Access Manager authorization decisions are based upon the Privilege Attribute Certificate (PAC), which is created for each user authenticated in an Access Manager environment, regardless of the authentication mechanism used.
Tivoli Access Manager Family
Tivoli Access Manager is not a single product but rather a family of products that use the same core authorization and authentication engine:
- IBM Tivoli Access Manager for e-business (TAMeb)
- IBM Tivoli Access Manager for Operating Systems (TAMOS) - controls access to operating system resources
- IBM Tivoli Access Manager for Enterprise Single Sign-On (TAMESSO)
References
{{Reflist}}
See also
- [http://www-306.ibm.com/software/tivoli/products/access-mgr-e-bus/ IBM Tivoli Access Manager for e-business product home]
- [http://www-306.ibm.com/software/tivoli/products/access-mgr-operating-sys/ IBM Tivoli Access Manager for Operating Systems product home]
- IBM Tivoli Identity Manager
Category:Computer access control
Category:Identity management systems
{{business-software-stub}}