Ankey IDM

The Ankey IDM software suite is an Identity Governance class solution for managing account lifecycle and access rights in 360-degree control mode.

2024

The ability to assess the level of threats in the context of departments

Gazinformservice on February 5, 2025 presented the Ankey IDM product update package for the 4th quarter of 2024. It is a software product for centralized management of user accounts and their authority in corporate information systems, including IGA (Identity Governance and Administration) solutions.

𝓲

Фото: Gazinformservice

In this version, risk management has been improved: now the system assesses the level of threats in the context of departments and marks potentially dangerous actions with markers in applications for role assignments and user profiles. Administrators have access to a new reporting subsystem with the ability to send reports to e-mail, as well as the ability to automate tasks with the configuration of their execution on specified nodes in the event of a complex operating in a cluster configuration.

Role management has become more flexible with the addition of a role copy feature, and users can split into active and revoked roles with the option of renewing or re-querying. Also, the date of the last certification is listed in the general user menu. The verification of the access rights of employees to the functions of the complex has been simplified: now it is presented in the form of a visual table. Integration with other systems is accelerated by step-by-step installation of connectors with the ability to configure and test. A special sandbox has been added to check the data coming from the connectors.

The user interface has also undergone significant improvements: added personal settings for visibility, filters and search, added support for individual filters and search templates. Users can save views of their list or table views to a personal menu. Information on employment and accounts has been significantly expanded, a special emphasis on this is necessary when changing the validity period for the provision of employee access. Details about the roles are now available directly from their list of assignments.

Widgets have been added to the monitoring, displaying new and changed permissions, as well as the time of approval of applications. A multilingual interface has appeared: users can choose their preferred language, Russian and English are preinstalled, other languages ​ ​ can be added through the well-known i18n for localization, "said Ivan Koreshkov, product manager at Ankey IDM.

Ability to conduct a more detailed access risk assessment

On November 25, 2024, Gazinformservice presented a quarterly update of the Ankey IDM software complex. This service pack includes a number of important improvements to improve the efficiency of the identity and access management system.

The Ankey IDM now allows for a more detailed assessment of access risks, taking into account user roles, certification date, and analyzing changes to the risk index at each request, thus facilitating more informed decision-making in alignment. Unlike many other solutions, Ankey IDM provides management of all user accounts and their access regardless of the number, ensuring their protection through support for multiple employment.

The system now has a multilingual interface that allows users to select a convenient language from a list of installed languages, with Russian and English available out of the box, and list expansion is supported through the i18n standard.

Convenient widgets provide access to key indicators of the system and administrative processes, displaying information on separate dashboards for convenient monitoring of active tasks, applications, processing time, risks and incidents. The system displays the revoked roles and the user's employment history, simplifying work and increasing transparency.

System code is optimized to improve performance and reduce server load. Finally, Ankey IDM now allows you to customize the display of data in the interface to suit the individual needs of users.

We continue to improve the efficiency and convenience of our Ankey IDM software suite. In parallel, the list of supported systems is expanding, technological partnerships are developing and cooperation with leading vendors in the field of information security is deepening. We are building our interactions to implement information security projects in terms of authentication, authorization and control of user access to the information resources of the most sophisticated customers, - said Ivan Koreshkov, product manager at Ankey IDM.

Multifactor Compatibility

MULTIFACTOR and Gazinformservice have confirmed the compatibility of their products and the correctness of their work. Multifactor announced this on October 21, 2024.

The compatibility of the MULTIFACTOR two-factor authentication system with the complex for centralized management of Ankey IDM user accounts has been confirmed. Based on the test results, a certificate of compatibility was issued. Read more here.

Integration with Blitz ldentity Provider

The companies Gazinformservice"" Reak Soft and conducted integration proprietary products: the Ankey IDM and account lifecycle management software complex. servers authentications Blitz ldentity Provider Gazinformservice announced this on February 27, 2024.

The joint use of Ankey IDM and Blitz Identity Provider simplifies and expands account control: it provides information about the last entry, allows you to use the 2FA/MFA, while ensuring the ease of operation of systems by employees thanks to a single entry point, "said Ivan Koreshkov, Product Manager Ankey IDM LLC" Gazinformservice. "

We are confident that the compatibility of Ankey IDM and Blitz Identity Provider will be an important step towards improving the level of account protection and identity management at a new level for our corporate customers. This integration not only reflects our common goal of providing customers with reliable, convenient and secure access control, "commented Mikhail Vanin, CEO of Identity Blitz.

2023: ALD Pro Compatibility

The compatibility of Ankey IDM and ALD Pro has been confirmed. The software stack is suitable for import substitution, and its application avoids sanctions risks and ensures compliance with regulatory requirements. This was announced on October 2, 2023 by Gazinformservice (GIS).

The compatibility of the products officially confirms the certificate issued under the Ready for Astra program and ensures that the technology stack is fully functional.

The Ankey IDM software can provide centralized management of employee accounts and monitor the status of their access rights. The solution is aimed at corporate customers with large-scale IT infrastructures, heterogeneous information systems and high information security requirements. It avoids unauthorized connection to resources, data breaches, additional costs associated with the investigation of such incidents, as well as possible downtime and financial losses.

My colleagues and I from Astra Group have been working on common projects for many years. Most customers from various sectors of the economy migrate from Active Directory to Russian solutions, and as a developer of 100% of the Russian IDM system, we support their initiatives and provide comprehensive assistance in achieving technological sovereignty, - said Ivan Koreshkov, product manager of Gazinformservice LLC.

The integration of the ALD Pro catalog service with the IDM system opens up new opportunities for automating the processes of creating accounts and granting employees access rights, and also expands the SSO functions of active connectors for managing third-party systems, - commented Evgeny Pautov, Director of the Management Tools Development Department of Astra Group of Companies.

For Astra Group of Companies, confirming the compatibility of ALD Pro with the IDM system approved by FSTEC is one of the important steps in realizing the needs of many key customers who should use domestic solutions in their infrastructures. Our clients, regardless of the staff and scope of activity, software from foreign vendors who have left the Russian market, - said Kirill Sinkov, head of the department for working with technological partners of Astra Group of Companies.

2022

Import substitution of information security systems under sanctions. Review of Ankey products from Gazinformservice

This article discusses the functionality of Gazinformservice's User (and Entity) Behavioral Analytics (UEBA/UBA) and Identity and Access Manager products.

Axiom JDK Pro Compatibility

Specialists of Gazinformservice, a large Russian system integrator and vendor in the field of information security, and engineers of the Axiom JDK team completed joint tests. The tests confirmed the compatibility and correctness of the Ankey IDM complex for access control in the Russian Java Axiom JDK Pro development and management environment from BELLSOFT. This was announced by Gazinformservice on December 21, 2022.

Testing allows you to recommend the use of Ankey IDM in the certified domestic Java environment to solve problems of digital sovereignty. Customers will be able to implement plans to avoid to import substitution ON operational and technological risks, as well as comply with the regulatory requirements for. critical information infrastructures (CIIs)

Technologically, the Java Axiom JDK Pro execution environment is a necessary link when launching the Ankey IDM complex on domestic OS and. DBMS This solution will be in demand among many Gazinformservice clients, including organizations, creditfinancial metallurgical companies, and. state information systems (GIS) CUES

Based on the results of the tests, the experts confirmed the correct functioning of the products, provided that the requirements of the operational documentation are met. Testing was performed for Ankey IDM from version 1.4 to the latest versions of the product and Axiom JDK Pro 11. The plans of the technology partners include joint testing in the Axiom JDK Certified environment, which has certificate FSTEC 4 CDs each.

Technological sovereignty is one of the priorities of the state. And in 2022, the importance of this area for domestic software manufacturers has increased even more. Since many developers of well-known world solutions changed the licensing policy, the company ensured the operation of the IDM complex on the trusted domestic Java platform and with components that will not depend on the geopolitical situation. The demand for such a solution will grow among customers who are obliged to comply with the requirements of regulators for import substitution, noted Ivan Koreshkov, product manager of Gazinformservice LLC.

One of the Russian market information security experts joined the company's partner program. The company's strategy is to develop partnerships with developers of basic technologies, applications, equipment and system integrators. The company strives to support all platforms, invests in testing and systematically expands the capabilities of professional products. This gives developers and users of Java applications confidence that they will receive the quality, competencies and technical support necessary to solve current and future problems in accordance with technological trends and domestic requirements, emphasized Aleksei Kuznetsov, Partner Relations Director Axiom JDK of BELLSOFT.

2021: Compatibility with Red OS

Gazinformservice, together with RED SOFT, tested the work of Ankey IDM (developed by Gazinformservice) and the software product RED OS (developed by RED SOFT). Tests have proven the correctness of work when sharing products. This was announced on December 23, 2021 by Red Soft.

Based on the results of the testing, the companies confirm the correct functioning of the products, provided that the requirements of the operational documentation are met.

{{quote "We traditionally pay great attention to the security of our account control system and compatibility with popular solutions. I note that Ankey IDM can both use RED OS as an operating system and manage the user accounts used in it - said Ivan Koreshkov, product manager of Gazinformservice LLC. }}

The development of the RED OS ecosystem is a priority area for our company. We strive to provide the user with a universal and, most importantly, a safe environment. The inclusion of Ankey IDM in the RED OS compatibility list is an important stage in working with Gazinformservice as a technological partner. We will strengthen cooperation - added Rustamov Rustam, Deputy General Director of RED SOFT LLC.

2017

Inclusion in the Register of Domestic Software

Based on the order of the Ministry of Communications of the Russian Federation dated 07.12.2017 No. 680, the Ankey IDM software package is included in the Register of Domestic Software, registry No. 4081.

Ankey IDM 0.8

The Application Server provides application business logic, periodic data synchronization jobs with target systems, electronic request negotiation routes, and provides end users with a personal account to manage their own accounts.

The application server performs account management (UI) in the target systems through the connector server, on which the necessary software libraries for integration (connectors) are installed.

Ankey IDM is configured in the administrative web console of the application server and using the RESTful API, which allows you to interact with adjacent IT service systems (for example, Service Desk, EDMS).

Basic description

As of December 2017, the Ankey IDM system has the following functionality:

• Centralize user and authority management through integration with different business applications
• Approval of access in the personal account using the electronic application form
• Enabling the user to manage their own accounts and roles
• Benefits with Ankey IDM

For the IT service:

• Optimize time and resources, and reduce the burden on IT administrators by reducing account management requests.
• "All on shelves" - when implementing the IDM system, the existing identification data is automatically corrected, the system is in order.

For information security service:

• Operational control of accounts, reduction of risks of unauthorized access.
• Access approval history reports (details of who and when had certain access, who agreed the application, etc.).
• Prompt investigation of information security incidents, termination of access to compromised accounts.

For company management:

• Reducing the cost of operating information systems.
• Reduce worker downtime due to lack of access.
• Increase the probability of successful information security audit in the organization.
• Reduction of risks of financial losses from unauthorized access.

Key functions of Ankey IDM

• Account Lifecycle Management:
• account self-management (reset forgotten password, unlock, access request)
• tracking personnel events (recruitment, dismissal, relocation, leave, etc.)
• Track the current status of the account on the target system

Electronic Access Control Request:

• customizable e-claim form
• batch (quick) approval of applications
• partial approval of the content of the application
• Support for notifications, reminders, escalations in the requisition
• support for serial and parallel negotiation routes

User Access Audit Reporting:

• online reports on the current status of user access rights
• User Access Change History Reports
• setting up non-standard reports