The "Killer App" for Directory Services?

Computer industry pundits frequently talk about "killer apps" - those applications which are so compelling that you wonder how you ever got along without them. These applications fill such a fundamental need that the platforms and services necessary to implement them are adopted solely to provide the necessary infrastructure for the application.

The quintessential "killer app" is generally conceded to be the electronic spreadsheet. VisiCalc - and later, Lotus 1-2-3 - drove the adoption of the personal computer onto the business desktop.

Microsoft Windows was little more than a curiosity - used to play Reversi and Solitaire - until the introduction of Word for Windows 1.0, soon followed by Microsoft Office and WordPerfect Office for Windows. The obvious advantages of seamless integration of word processor, spreadsheet, database and presentation software required us to move to faster, RAM-filled computers with a Graphical User Interface.

Network managers know the value of directory services, but explaining that value to non-technical enterprise management has been difficult. What was needed were applications which leveraged Directory Services and provided essential business solutions. What was needed was a "Killer App" for Directory Services.

eProvisionware could be that killer app.

Background

To understand eProvisionware, its necessary to know what "provisioning" implies. The dictionary defines it as the act of providing "necessary food or equipment". Explorers setting out to seek fame and glory in the new world required provisioning. They needed to take everything they would possibly need with them as they couldn't count on anything being available once they had left port. Everything had to be ready on the day they sailed.

The telecommunications industry took on the term "provisioning" and used it to describe the actions necessary so that a dial tone would be available when you picked up the telephone handset. This involves coordination of the phone company's customer service, central office, installation and billing departments as well as the timely sequence of running cable and connecting it at numerous points.

Now think of the activities your enterprise engages in between the time a new employee is hired and the employee's first day on the job. Many of the following will need to be ordered, received, installed, set up or configured:

· Office or cubicle

· Desk and chair

· Telephone, extension number, voice mail

· Desktop computer, operating system, networking connection, applications

· VPN or remote access to network

· Notebook PC, palm device

· Access to building, computer, network, applications

· Entry into various databases and directories for Human Resources, Finance, Payroll, IT, Building Services, and e-mail as well as departmental and workgroup entries

And that's not all, for most enterprises. You probably do it all today with a combination of automated tasks with a large dose of manual entry and manual follow-up - phone calls and e-mails flying hither and yon. More often than not, though, there's always something still left undone when the new employee walks in the door that first day.

Enter eProvisionware to the rescue.

eProvisionware

When HR hires the employee, an entry is made in the ERP (Enterprise Resource Planning) database. This synchronizes with the Enterprise Directory Service where templates are used to create user entries. The user entry is pushed out to every other directory and database in the enterprise along with notification that the new object is available. Administrators and managers then complete the user setup. A physical inventory database can even decide if new office furniture and PC hardware needs to be ordered or is available in inventory. Work orders are automatically cut and sent to the departments who need them to insure timely installation of needed facilities.

Periodic reports are automatically generated on milestone dates so that everyone involved knows the current status of the project. Any delays are flagged to the appropriate managers for remedial action.

The Directory at the Core

This automation of provisioning activities is only possible where a scalable, extensible, robust directory service resides at the core of the enterprise with the capability to synchronize with any other directories and database systems within the enterprise.

Directory Services such as Novell's NDS eDirectory when used with Novell's NDS Corporate Edition and other synchronization agents provide the core service which enables eProvisionware applications to automate large amounts of provisioning activity.

One company, Business Layers of Upper Saddle Ridge, NJ is leading the way towards fully automated eProvisioning with their eProvision:Employee software, currently finishing its beta test cycle. While eProvision:Employee can use most LDAP compliant directories as its primary repository, it has (wisely, we think) chosen to be one of the first vendors to ship Novell's eDirectory with its product.

Business Layers

Business Layers' eProvision:Employee, based on NDS eDirectory, will already do many of the activities we outlined above in its first release. It will also add two very important functions extending its scope from provisioning to both de-provisioning and re-provisioning.

De-provisioning is the process of removing an employee from the system - closing accounts, blocking access, summarizing assets for final inventory up through getting the last paycheck cut. From a security standpoint, this process may be even more important than the original provisioning.

Re-provisioning is the act of moving an employee or a group of employees to a new location, to a new position within the company, to a subsidiary or simply to a new level of access.

Future eProvisionware

eProvisionware doesn't have to stop with employees. Provisioning access for vendors and clients - for all of your business partners - is the next step. Eventually, your entire supply chain can be part of the eProvisioning system, allowing secure access where needed, providing resources as needed and maintaining preferences and identities for everyone involved.

The AberdeenGroup, in a September, 1999 Technology Viewpoint letter, outlines a scenario of a company faced with a major lawsuit using eProvisioning to pull together a virtual "situation room" with assets and resources from the company, its law firms, business partners and suppliers as well as any outside experts needed. Without an eProvisionware solution, this could take weeks, but with the directory guided solution, it could be done - at lower cost - in a matter of hours. The full report is available from either the AberdeenGroup or from Business Layers.

Summary

Provisioning new employees is a time and money consuming operation. By using enterprise class Directory Services and eProvisionware applications, you can reduce the time needed, drastically cut the money expended and extend the provisioning service to not only new employees, but also business partners and customers.

The time and money saved make eProvisionware compelling which in turn lead to its possible use as the "killer app" for Directory Services.

###

http://www.aberdeen.com/

http://www.businesslayers.com/

Ó 1999, Novell, Inc.