Approaches To Linking Disparate Account IDs
As mentioned above, in many organizations, users may sign into different systems and applications using different login IDs. There are many reasons to link these into ``enterprise-wide user profiles.
There are a number of basic strategies to perform this correlation, or "ID Mapping:"
- Assume that account IDs are the same:
- In this case, mapping is trivial.
- This actually works in many organizations, in cases where a rigorous and standardized process has been used to assign IDs to new users for a long time.
- Import mapping data from an existing system:
- If an organization has implemented a robust process for mapping IDs to users over a long period, this data is already available and can be imported into any new Identity management system.
- Exact matching on attribute values:
- Find one identity attribute or a combination of attributes on one system which correlate to one or more attributes on another system.
- Connect IDs on the two systems by finding users whose attribute(s) are the same.
- Approximate matching on attribute values:
- The same as above, but instead of requiring attributes or expressions to match exactly, tolerate some differences.
- This allows for misspelled, inconsistently capitalized and otherwise somewhat diverse names and similar identity values.
- The risk here is that accounts which should not be connected will accidentally be matched by this process.
- Self-service login ID reconciliation:
- Invite users to fill in a form and indicate which IDs, on which systems, they own.
- Users might lie or make mistakes—so it's important to validate user input, for example by asking users to also provide passwords and to check those passwords.
- Users might not recognize system names—so it's important to offer alternatives or ask users for IDs+passwords in general, rather than asking them to specify which system those IDs are for.
- Hire a consultant and/or do it manually:
- This still leaves open the question of where the data comes from—perhaps by interviewing every user in question?
Read more about this topic: Identity Correlation
Famous quotes containing the words approaches to, approaches, disparate and/or account:
“Perfect happiness I believe was never intended by the deity to be the lot of any one of his creatures in this world; but that he has very much put in our power the nearness of our approaches to it, is what I steadfastly believe.”
—Thomas Jefferson (1743–1826)
“You should approach Joyce’s Ulysses as the illiterate Baptist preacher approaches the Old Testament: with faith.”
—William Faulkner (1897–1962)
“As if, as if, as if the disparate halves
Of things were waiting in a betrothal known
To none, awaiting espousal to the sound
Of right joining, a music of ideas, the burning
And breeding and bearing birth of harmony,
The final relation, the marriage of the rest.”
—Wallace Stevens (1879–1955)
“You should try to understand every thing you see and hear; to act and judge for yourselves; to remember you each have a soul of your own to account for; M a mind of your own to improve. When you once get these ideas fixed, and learn to act upon them, no man or set of men, no laws, customs, or combinations of them can seriously oppress you.”
—Jane Grey Swisshelm (1815–1884)