As part of BDC’s Infosec Roadmap for 2020-2021, BDC initiated an Identity and Access Management (“IAM”) project. The goal of this project is to provide its employees, consultants, clients, business partners and prospects a consistent and easy way to access BDC’s infrastructure, applications and financial services. BDC’s objective is to refresh its IAM Solutions with the following three (3) components, an:
Overall, BDC is in search for a modern IAM solution that is API driven and can effectively operate and manage registrations, profiles, authentications, and provide employees and clients with self-service functionalities. The self-service functionalities are registration, profile management, access requests and password management. The solution must provide a foundation for a standardized multi-factor authentication capabilities and federation, modern authentication for applications, integration functionalities to support digital identity proofing solutions and social Identity Provider (“IdP”) and must manage consent information.
- User Directory to consolidate both internal (employees and consultants) and external (clients, business partners and prospects) data in one (1) single integrated solution.;
- Identity and Access Management solution that leverages Financial Grade Tokens ("FAPI") for the OpenID Connect protocol; and
- Identity Governance Administration (“IGA”) solution that will be integrated with the User Directory and Access Management post implementation of these two (2) other components.
BDC has approximately 100,000 external users and 4,000 internal users to be managed by the new IAM Solution.