IBM Sterling Ideas

Submit new product ideas for IBM Sterling solutions. Before you submit, please review existing ideas; if an idea close to yours already exists, it's better to add comments or vote on the existing idea. We will review your ideas and use them to help prioritize our product development. Best of all, the portal will automatically update you when the status of your idea has been changed.

IBM is transforming its request for enhancement (RFE) process. The purpose of the transformation is to provide a more consistent experience for you to submit requests and to enable IBM product owners to respond to your requests more quickly. For more information click here.

Connect with IBM experts and your peers on the Supply Chain Collaboration Community and the Order Management Interest Group

Inactive User Accounts Controls - Trading Partners and Administrator Accounts

Trading partner connections (mailboxes) and administrator accounts within the Sterling File Gateway application (File Gateway and Dashboard interfaces) are not disabled/removed after a specified period of inactivity in compliance with Trinity EIS procedure  Revoking User's Access.

 

Risks:  Application parameter settings that do not automatically disable and/or remove user accounts after a specified period of inactivity may result in unauthorized access, modification, destruction, and/or disclosure of confidential information.

  • Avatar32.5fb70cce7410889e661286fd7f1897de Guest
  • Nov 9 2018
  • Declined
IBM File Gateway / Security
How will this idea be used?

We are not able to satisfy Trinity Health Security audit without this control.

×

Attachments Open full size

What is your industry? Healthcare
What is the idea priority? High
  • Attach files
  • Admin
    Ryan Wood commented
    15 Jul, 2019 03:54pm

    Thank you for participating in the Request for Enhancement community. While we do understand the importance of this RFE, and it's security implications, we currently cannot commit to delivering this RFE in an acceptable timeframe (12-18 months). For that reason we will decline this request. We do have visibility and user security (including multi-factor authentication) on the roadmap, however, for this specific request please re-open in 12 months to see where we stand.

    Thank you,

    Ryan Wood

    ×

    Attachments Open full size

  • Avatar40.8f183f721a2c86cd98fddbbe6dc46ec9
    Guest commented
    8 Jul, 2019 03:56pm

    When can we expect an update?

    ×

    Attachments Open full size

Related ideas

NOTICE TO EU RESIDENTS: per EU Data Protection Policy, if you wish to remove your personal information from the IBM ideas portal, please log into the ideas portal using your previously registered information then change your email to "anonymous@euprivacy.out" and first name to "anonymous" and last name to "anonymous". This will ensure that IBM will not send any emails to you about your idea submissions.