IBM Tivoli Access Manager

This article does not cite any references or sources. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (February 2008)

IBM Tivoli Access Manager is an authentication and authorization solution for corporate web services, operating systems, and existing applications.^[1] Tivoli Access Manager runs on various operating system platforms such as Unix (AIX, Solaris, HP-UX), Linux, and Microsoft Windows.

Core Components

Tivoli Access Manager has two core components:

• A user registry.^[2]
• An authorization service consisting of an authorization database and an authorization engine that performs the decision-making action on the request.^[3]

A user registry and an authorization service are the fundamental building blocks upon which Access Manager provides its security service capabilities. All other Access Manager services and components are built upon this base foundation.

Another component that is very close to the base components is called a resource manager. It is responsible for applying security policy to resources. The policy enforcer component directs the request to the authorization service for evaluation.^[4] Based on the authorization service result (approval or denial) the resource manager allows or denies access to the protected resources. Access Manager authorization decisions are based upon the Privilege Attribute Certificate (PAC), which is created for each user authenticated in an Access Manager environment, regardless of the authentication mechanism used.

Tivoli Access Manager Family

Tivoli Access Manager is not a single product but rather a family of products that use the same core authorization and authentication engine:

• IBM Tivoli Access Manager for e-business (ITAMeb)
• IBM Tivoli Access Manager for Business Integration (ITAMBI)
• IBM Tivoli Access Manager for Operating Systems (ITAMOS) - controls access to operating system resources

Tivoli Access Manager for e-business

Tivoli Access Manager for e-business provides robust, policy-based security to a corporate Web environment. TAMeb provides authentication of users, control of access privileges, auditing, single sign-on, high availability, and logging.

References

See also

• IBM Tivoli Access Manager for e-business product home
• IBM Tivoli Access Manager for Operating Systems product home
• IBM Tivoli Identity Manager