Identity and Access Management (IAM) is one of the most complex challenges in the transformation of cloud adoption for a global financial institution like Morgan Stanley that faces the most rigid and constantly-changing regulatory environments across the world. A global technology platform with vast infrastructure, dispersed teams and countless applications only adds to the complexity. 

This presentation will provide an overview of IAM concepts and common challenges faced by multinational companies, and then dig into the IAM solutions in cloud environments. 

For identity management, we will cover methods of handling identity federation, authentication and Single Sign On (SSO). And for access management, we will discuss the idea of bridging access control solution on multiple clouds  for the realization of unified IAM.

对于摩根士丹利等国际金融机构而言，为了应对严格和多变的全球监管环境，云端身份和访问管理（Identity and Access Management, 或称 IAM）成为其云转型过程中复杂的技术难题之一。与此同时，其全球技术平台下庞大的基建架构、遍布全球的团队、以及不计其数的应用程序都使这种复杂性更为加剧。

本主题演讲将简单介绍身份和访问管理（IAM）的基本概念及跨国公司在此领域面临的共同挑战，然后深入探讨摩根士丹利在云端身份和访问管理（IAM）领域的解决方案。

针对身份管理，本演讲将涵盖联合身份验证（Identity Federation）、身份识别及单点登录（Single Sign On，或称SSO）；针对访问管理，本演讲将探讨多重云（Multiple Clouds）环境下的桥接访问控制解决方案，以期实现统一标准的身份和访问管理。