Identity & Access Management for Applications | Access Administration

This service ensures that application and resource owners establish and administer KP resources according to KP policy and industry standards.

Self-Service Access Request

This service covers Access Request submission, approval(s), and fulfillment and allows users to request access to applications/platforms using KP Identity Manager.

This service is provided through KPIM Self Service, a web-based application that allows users to request access to applications and infrastructure systems already registered in KPIM. KPIM manages approval routing and automated or manual provisioning.

When to use this service

This service should be used when applications would like to allow users to request access to their KPIM boarded application(s). Any expansion of identity data elements or attributes in KPIM requires IAM architecture review.

Getting Started

You have two ways to request this service:

Automated Provisioning

This service provides automated granting or revocation of user access to applications and infrastructure systems. This service is offered through KP Identity Manager (KPIM).

When to use this service

This service is used when applications can automate access approvals using KPIM. Automation enables cost efficiency, reduces error rates, and increases speed of fulfillment.

Getting Started

You have two ways to request this service:

Centralized Access Provisioning Service (CAPS)

This service allows for a centralized team to provide manual provisioning and deprovisioning of user access to managed IT applications and host layer systems.

When to use this service

This service is offered to clients who prefer that the IAM Access Provisioning Team be responsible for access administration on their applications.

Getting Started

You have two ways to request this service:

Role Management

Roles simplify the management of user access rights to applications and infrastructure systems. The Role Management service includes role engineering, role request and approval, role assignment and revocation, and role review and recertification.

Getting Started

You have two ways to request this service: