The SLAC IAM Program will accomplish several critical objectives.

The program objectives are:

• Establish a single sign-on experience for all strongly affiliated SLAC staff.
• Consolidate user accounts so there is just one Stanford/SLAC user account to manage per individual. 
• Create universal user registration processes for SLAC staff, facility users, and visitors.
• Modernize SLAC’s IAM infrastructure to be adaptable, scaleable, and equipped to meet future research, mission objectives, and administrative needs.
• Transition to systems and tools that are highly available, cloud-hosted, and geo-diverse.
• Comply with federal, Department of Energy (DoE), and Stanford University requirements and industry best practices.

Identity Management includes usernames and devices, services, groups, and other unique online identifiers associated with SLAC users or systems. It also encompasses all aspects of identity creation, from initiating new user access to managing change processes, granting user access levels, authentication, and more.

Understand how SLAC defines person and device identity and the IAM Program will simplify and improve our identity management processes.

Access Management refers to the process by which SLAC determines which individuals and systems need access to various applications, devices, and networks. Access control criteria are derived from an individual’s organizational affiliation or role or based on project needs.

The SLAC IAM Program will consistently and securely apply access control policies per best practices and lab needs. Under the new IAM infrastructure, administrators and managers from across the organization can better manage user groups, group definitions, and staff and facility access.