Identity Correlation - Approaches To Linking Disparate Account IDs

Approaches To Linking Disparate Account IDs

As mentioned above, in many organizations, users may sign into different systems and applications using different login IDs. There are many reasons to link these into ``enterprise-wide user profiles.

There are a number of basic strategies to perform this correlation, or "ID Mapping:"

  • Assume that account IDs are the same:
    • In this case, mapping is trivial.
    • This actually works in many organizations, in cases where a rigorous and standardized process has been used to assign IDs to new users for a long time.
  • Import mapping data from an existing system:
    • If an organization has implemented a robust process for mapping IDs to users over a long period, this data is already available and can be imported into any new Identity management system.
  • Exact matching on attribute values:
    • Find one identity attribute or a combination of attributes on one system which correlate to one or more attributes on another system.
    • Connect IDs on the two systems by finding users whose attribute(s) are the same.
  • Approximate matching on attribute values:
    • The same as above, but instead of requiring attributes or expressions to match exactly, tolerate some differences.
    • This allows for misspelled, inconsistently capitalized and otherwise somewhat diverse names and similar identity values.
    • The risk here is that accounts which should not be connected will accidentally be matched by this process.
  • Self-service login ID reconciliation:
    • Invite users to fill in a form and indicate which IDs, on which systems, they own.
    • Users might lie or make mistakes—so it's important to validate user input, for example by asking users to also provide passwords and to check those passwords.
    • Users might not recognize system names—so it's important to offer alternatives or ask users for IDs+passwords in general, rather than asking them to specify which system those IDs are for.
  • Hire a consultant and/or do it manually:
    • This still leaves open the question of where the data comes from—perhaps by interviewing every user in question?

Read more about this topic:  Identity Correlation

Famous quotes containing the words approaches to, approaches, disparate and/or account:

    “Perfect happiness I believe was never intended by the deity to be the lot of any one of his creatures in this world; but that he has very much put in our power the nearness of our approaches to it, is what I steadfastly believe.”
    —Thomas Jefferson (1743–1826)

    “A politician is a statesman who approaches every question with an open mouth.”
    —Adlai Stevenson (1900–1965)

    “As if, as if, as if the disparate halves
    Of things were waiting in a betrothal known
    To none, awaiting espousal to the sound
    Of right joining, a music of ideas, the burning
    And breeding and bearing birth of harmony,
    The final relation, the marriage of the rest.”
    —Wallace Stevens (1879–1955)

    “Resorts advertised for waitresses, specifying that they “must appear in short clothes or no engagement.” Below a Gospel Guide column headed, “Where our Local Divines Will Hang Out Tomorrow,” was an account of spirited gun play at the Bon Ton. In Jeff Winney’s California Concert Hall, patrons “bucked the tiger” under the watchful eye of Kitty Crawhurst, popular “lady” gambler.”
    —Administration in the State of Colo, U.S. public relief program (1935-1943)