IBM Security Access Manager for Enterprise Single Sign-On, Version 8.2.1

Planning and Deployment Guide

IBM Security Access Manager for Enterprise Single Sign-On Planning and Deployment Guide contains information about planning your deployment and preparing your environment. It provides an overview of the product features and components, the required installation and configuration, and the different deployment scenarios. It also describes how to achieve high availability and disaster recovery. Read this guide before you do any installation or configuration tasks.

Product overview
IBM® Security Access Manager for Enterprise Single Sign-On delivers a simple, flexible, and complete identity and access management solution at the enterprise endpoints. This product automates access to corporate information, strengthens security, and enforces compliance at the enterprise endpoints.
Deployment requirements
Familiarize yourself with what you must have and do to successfully deploy IBM Security Access Manager for Enterprise Single Sign-On.
Planning for deployment
There are several factors that affect the successful deployment of IBM Security Access Manager for Enterprise Single Sign-On. You must plan carefully. Know what you have, need and must do to successfully install or upgrade, or ensure the high availability and disaster recovery of IBM Security Access Manager for Enterprise Single Sign-On.
Planning for high availability and disaster recovery
Implementing high availability is about ensuring that services are always available. Disaster recovery is the process of restoring the IBM Security Access Manager for Enterprise Single Sign-On service to a production state in the event of an outage.
Planning for performance
Configure IBM Security Access Manager for Enterprise Single Sign-On for an improved system performance.
Planning for security
Secure the IBM Security Access Manager for Enterprise Single Sign-On deployment on servers, workstations, remote desktop environments, and thin clients.
Planning for installation
There are different ways to install each of the product components and there are several factors to consider when installing these components.
Planning for an upgrade
IBM Security Access Manager for Enterprise Single Sign-On supports upgrade of previous product releases to the latest release to use the new and enhanced features. IBM Security Access Manager for Enterprise Single Sign-On upgrade is done per component similar to installation.
Planning for configuration
Configure the IMS Server, client components, application profiles, and single sign-on policies to complete the deployment.
Planning for authentication factors
IBM Security Access Manager for Enterprise Single Sign-On supports the use of different authentication factors such as fingerprints, RFID and smart card devices, and one-time passwords.
Session management
IBM Security Access Manager for Enterprise Single Sign-On supports session management in personal workstations and shared workstations.
Product maintenance
After a successful product deployment, the next phase is product maintenance. Administrators must regularly back up data, apply fix packs, and perform database pruning when necessary.
Change password and reset password
The AccessAgent window has a change password and reset password option. Users can update their ISAM ESSO password through these options.

Feedback