Micro Focus Access Manager

Organizations pursuing digital transformation are placing increasing strain on identity management and access control, requiring stronger processes for collecting, managing, and ultimately deleting identity data so that the right people have the right access at the right time. Access management has expanded beyond employees and on‑premises resources managed through Active Directory groups to include contractors, partners, and multiple customer classes accessing cloud-based applications. Key drivers include deeper partner interconnection requiring federated authentication and shared trust; differentiated assurance levels requiring adaptive MFA without burdening low-assurance users; pressure to move beyond passwords toward token-based and SSO-driven approaches; hybrid environments spanning on‑premises and multiple clouds demanding unified policy; microservices and API-centric architectures that increase agility; stronger mobile information protection; and expectations that AI will improve security through behavioral analytics and anomaly detection.

Micro Focus Access Manager (from the NetIQ/Novell lineage acquired in 2014) is positioned as part of a “loosely coupled, tightly integrated” IAM suite covering provisioning, access, analytics, and governance. The solution comprises an Access Gateway (SSO, authorization, policy enforcement), an Identity Server (multi-store identity, certificates, RADIUS, SAML, OTP, RBAC), an Administrative Console (policy configuration, delegated admin, monitoring), and an Analytics Server (usage and performance dashboards). Enhancements include expanded MFA, improved secure APIs, a rules-based risk engine, and planned behavioral analytics strengthened by the Interset acquisition.

Access Manager supports broad authentication standards and token methods, integrates with major cloud platforms (notably AWS and Azure, with partner implementations for Google and IBM), and supports containers and automated release processes. It enables context-aware controls (geo-fencing, device identification, time-of-day), federation and federated provisioning, social and developer connectors, mobile SDKs with QR-based device enrollment, and an API gateway for traffic management and IoT integration. Licensing is user-based; some methods are included, while biometrics and push require Advanced Authentication. Strengths emphasize enterprise scale and hybrid-cloud depth; challenges include suite complexity and CIAM pricing sensitivity.

• Micro Focus International acquired the NetIQ (originally Novell) product suite in 2014.
• Access Manager is part of an integrated IAM suite spanning provisioning/fulfillment, authentication/access management, analytics, and governance.
• The Access Manager solution includes four core components: Access Gateway, Identity Server, Administrative Console, and Analytics Server.
• Connectors are provided out-of-the-box for Facebook, Google, Twitter, and Instagram.
• Salesforce and LinkedIn are supported, enabling attribute import for access control decisions with user consent.
• A GitHub connector is provided for developer-oriented integration scenarios.
• Micro Focus provides software development kits for both Android and iOS with a “drop-in” API for mobile app integration.
• Device enrollment can be automated by scanning a QR code to capture device data for MFA or other mobile services.
• Access Manager supports FIDO U2F and FIDO2.
• Access Manager follows a user-based licensing model, and biometrics and push notification require purchasing Advanced Authentication.

• “Collection, management, and eventually deletion of identity information tasks must focus on ensuring the right person has the right access to corporate resources at the right time.”
• “It is no longer acceptable to enter identity records from a business partner into the corporate directory, nor should generic accounts for access by business partners be tolerated.”
• “It makes no sense to impose a high-level of assurance on a customer as it will not be tolerated.”
• “Equally, a service agent accessing plant equipment should not be able to do so with a social media login.”
• “Organizations are no longer tolerating the vulnerability and support requirements associated with passwords.”
• “Hybrid environments encompassing on-premise and multiple cloud platforms are now normal.”
• “This significantly shortens the test and release process and increases program development agility.”
• “Micro Focus has adopted the phrase ‘loosely coupled, tightly integrated’ to describe their product suite.”
• “Advanced Authentication can function as an organization’s primary authentication service or as an adaptive service for step-up authentication.”
• “The API gateway is the preferred integration point for IoT platforms.”