What is the shortest path to effectively determine the parameters of your Identity Management initiative?  This article is for folks that want to put scope to their Identity project, but not sure where to begin.

This is a 2 part series that could help put some scope around your initiative. We're assuming that your business drivers are clear to you, and this excercise works best for folks who have a general idea of what they want, but need to put some details in there...so here goes:

 STEP 1: Complete the PUT Chart

 The first step of the exercise is to complete the PUT Chart. "PUT" is an acronym that stands for Processes, User Populations and Target Systems. Understanding these three components and their inter-relationships is the key to accurately scoping most Identity Management Initiatives. The following format should be utilized:


project scooping


Processes are defined as a comprehensive list all business processes that your organization is seeking to manage under the Identity Management initiative, and should be your first point of context for scoping your project.  User Populations list the unique set of populations that make up and interact with your environment directly.  Target Systems list all applications where identity data is stored and have a direct relation to your users and their accounts. A good litmus test is to identify target systems for each user population listed in column 2.



 The next step is to draw lines of correlation between the processes, user populations and target systems. For example, if User Attestation is applicable only to Full Time Employees and Vendors, and only for the Lawson Financials system, then the appropriate lines should be drawn between those items in order to denote the relationship.

  • This process should be continued until all listed items in the 3 columns have been correlated. Each continuous line from left to right constitutes a "Business Process Correlation Set".
  • This portion of the exercise will allow you to refine your user population segmentation. If you find it difficult to correlate a specific user population, you may need to rethink their granularity level.
  • At this point, you will have a matrix of relationships that provides context to the business processes you are seeking to manage within the Identity Management initiative.
  • Once completed, assign one of three priority levels (high, medium, low) to each Business Process Correlation Set. These priority levels will be useful when identifying an Identity Management Roadmap.

 (to be continued in Part II...)


Strategic Planning for IAM Success

Ash Motiwala

Ash Motiwala

I’ve been in the identity space for most of my career, and I’m still passionate about it. Anyhow, a CTO is supposed to be the person who sets technical vision for the company, but honestly – Identropy has way too much brainpower for a single person to do that. Instead, I get my hands dirty with the customer development process, lend a helping hand wherever its needed, and I have the privilege to talk identity with some of the brightest minds in this space every day.