Centralized Identity Management in a Decentralized Organization

Abstract

The purpose of this thesis is to research centralized identity management at information security organization. The research presents the former and the prospective identity management processes and the most significant information security risks in the former identity management process. This thesis is a research to support the commissioner when developing the prospective identity management process.

This thesis explicates the technical platforms and concepts that are present in Microsoft’s identity management infrastructure. The technical platforms and concepts include Active Directory, Azure Active Directory, Microsoft Azure, Office 365 and Microsoft Enterprise Mobility + Security. In addition, the identity and the identity management concepts are presented.

As a result of this thesis changes in the prospective identity management process are inevitable due to issues arisen in the research. These issues concern specifically information security and lack of management, for example in use and device management. This thesis should be perceived as a guide for Information Technology department and Management at information security service provider to assist and to support the decision making when developing the identity management process.