Applicable Doc. 5E - IAM Playbook - CAR.pdf

PDF 117 KB Posted

Attached to
DF01--IAM Recompete Task Order (VA-24-00001896)
Solicitation number
36C10B24Q0109
Issued by

About this file

This document outlines an Identity and Access Management (IAM) playbook for integrating applications with the VA's Common Audit and Reporting (CAR) service. The CAR service provides reporting functionality and connectors to retrieve audit and log data from integrated applications. It exposes two interfaces for integration: a COTS connector for applications with existing infrastructure and a custom connector for custom application platforms. The playbook provides guidance on the process for applications to request use of IAM services through the Information Technology Request Portal, including developing custom connectors if needed.

The related federal contract opportunity is a pre-solicitation for an IAM recompete task order with the Department of Veterans Affairs Technology Acquisition Center. It will consolidate IAM functions including integration with the CAR service.

View the file

Other files

File Type Posted
36C10B24Q0109_4.docx DOCX document
36C10B24Q0109_3.docx DOCX document
36C10B24Q0109_2.docx DOCX document
RFI 36C10B24Q0109 QA CO Final.docx DOCX document
36C10B24Q0109_1.docx DOCX document
IAM MASTER PWS for RFI.docx DOCX document
Applicable Doc. 5A - IAM Playbook - Home.pdf PDF
Applicable Doc. 13 - AcS VIP23 SSOe EU HD User Guide.pdf PDF
Applicable Doc. 04 - IAM-VAEC Configuration Management Plan_June-2021 (1).pdf PDF
Applicable Doc. 02 - IAM Conceptual Architecture.pdf PDF
36C10B24Q0109.docx DOCX document
Applicable Doc. 14 - Application Integration Summary Form.xlsx XLSX spreadsheet
Applicable Doc. 09 - IAM Requirements Backlog.pdf PDF
Applicable Doc. 19 - VAEC Technical Reference Guide 2022 v2.0.pdf PDF
Applicable Doc. 5D - IAM Playbook - SSOe.pdf PDF
Applicable Doc. 16 - VA OIT Change Control SOP.pdf PDF
Applicable Doc. 20 - Directive 6510 15 Jan 2016.pdf PDF
Applicable Doc. 15 - After Action Report Template.pdf PDF
Applicable Doc. 07 - IAM Master Glossary.pdf PDF
Applicable Doc. 18 - IAM Requirements Traceability Matrix.xlsx XLSX spreadsheet
Applicable Doc. 08 - COTS Product Roadmap.pdf PDF
Applicable Doc. 10 - yourIT Service Portal Quick Reference Guide.pdf PDF
Applicable Doc. 11 - ITSM-Tool-Quick-Start-Guide.pdf PDF
Applicable Doc. 17 - Standard Change Process.pdf PDF
Applicable Doc. 06 - IAM Business Requirements Document (BRD).pdf PDF
Applicable Doc. 01 - Authorization_Requirements_SOP_Guide.pdf PDF
Applicable Doc. 5F - IAM Playbook - AMS.pdf PDF
Applicable Doc. 5B - IAM Playbook - VAMPI.pdf PDF
Applicable Doc. 03 - IAM Design and Architecture Management Plan.pdf PDF
Applicable Doc. 12 - Monthly Status Report Template.pdf PDF
Applicable Doc 21- Business Associate Agreement.pdf PDF
Applicable Doc. 5G - IAM Playbook - Prov.pdf PDF
Applicable Doc. 22 - Identity Verification Integrated Control Document (ICD).pdf PDF
Applicable Doc. 5C - IAM Playbook - SSOi.pdf PDF
Show all 34

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Last modified at 4/8/2021 3:32 PM by DeAntonio, Damien M. (Green Threads) (he/him/his)

IAM Playbook Home

CAR Playbook This (and all IAM playbooks) playbook is a collaborative and continuously improved wiki/document. The purpose of the wiki/document is to provide as much useful technical information to integrating partners, if there is information that you feel is missing please let us know and we can add it or even give you contributor rights to add the information yourself!

Applications interested in using any of the IAM services should submit a service request (SR) using the Information Technology Request Portal (ITRP) to start the process.

References AcS Common Business Rules

Overview Audit and Reporting allows access to audit and log data for IAM services and integrated VA applications. This allows business groups, auditors, and compliance assessors easy access to the information in order to perform their duties. CAR provides the capability to monitor integrated applications and services to produce reports and generate alerts triggered by events or breach of predetermined event thresholds. Enabling an enterprise CAR service provides VA a common compliance auditing framework enabling the foundation for adherence within applicable government policy and regulation.

Function Description Supporting Interfaces

Generate Reports Provides report generation functionality to the integrated application based on data made available to CAR from AcS components or the application

COTS Connector Custom Connector

Integration Patterns CAR exposes two interfaces for application integration. The interfaces enable integration with applications to retrieve audit and log data. The interfaces available to support these functions are identified in the following diagram. The CAR service provides a series of connectors that can be used to retrieve log and audit data from applications. Depending on the application architecture, there may be an existing connector for application’s underlying COTS infrastructure. If there is not a COTS connector in place, then there may be a need to develop a custom connector.

Page Rating

Categories No categories were selected

IAM Playbooks

CAR

https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/_layouts/listform.aspx?PageType=4&ListId={FC3D90CA-C60C-44F7-9901-1C022384F074}&ID=39 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/IAM%20Playbook%20Home.aspx https://dvagov.sharepoint.com/sites/CMDM-RP/SitePages/What-is-ITRP-.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Documents/AcS_Common_Business_Rules_Document.pdf javascript:;

javascript:;

javascript:;

javascript:;

javascript:;

https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/IAM%20Playbook%20Home.aspx

Pattern What does it do?

COTS

Connector

It integrates the CAR Service with the consuming application via an OOTB connector to retrieve access-related data to produce standard reports.

Custom Connector

The custom connector operates similarly to the COTS connector, but enables the development of custom routines and procedures to accommodate custom application platforms. The custom connector enables the same functionality available in the COTS connector.

File details come from the government source that posted it. Updated .