IDEAS home Printed from https://ideas.repec.org/a/spr/binfse/v66y2024i4d10.1007_s12599-023-00830-x.html
   My bibliography  Save this article

A Systematic Review of Identity and Access Management Requirements in Enterprises and Potential Contributions of Self-Sovereign Identity

Author

Listed:
  • Jana Glöckler

    (University of Bayreuth)

  • Johannes Sedlmeir

    (Branch Business and Information Systems Engineering of Fraunhofer FIT
    University of Luxembourg)

  • Muriel Frank

    (University of Luxembourg)

  • Gilbert Fridgen

    (University of Luxembourg)

Abstract

Digital identity and access management (IAM) poses significant challenges for companies. Cyberattacks and resulting data breaches frequently have their root cause in enterprises’ IAM systems. During the COVID-19 pandemic, issues with the remote authentication of employees working from home highlighted the need for better IAM solutions. Using a design science research approach, the paper reviews the requirements for IAM systems from an enterprise perspective and identifies the potential benefits of self-sovereign identity (SSI) – an emerging, passwordless paradigm in identity management that provides end users with cryptographic attestations stored in digital wallet apps. To do so, this paper first conducts a systematic literature review followed by an interview study and categorizes IAM system requirements according to security and compliance, operability, technology, and user aspects. In a second step, it presents an SSI-based prototype for IAM, whose suitability for addressing IAM challenges was assessed by twelve domain experts. The results suggest that the SSI-based authentication of employees can address requirements in each of the four IAM requirement categories. SSI can specifically improve manageability and usability aspects and help implement acknowledged best practices such as the principle of least privilege. Nonetheless, the findings also reveal that SSI is not a silver bullet for all of the challenges that today’s complex IAM systems face.

Suggested Citation

  • Jana Glöckler & Johannes Sedlmeir & Muriel Frank & Gilbert Fridgen, 2024. "A Systematic Review of Identity and Access Management Requirements in Enterprises and Potential Contributions of Self-Sovereign Identity," Business & Information Systems Engineering: The International Journal of WIRTSCHAFTSINFORMATIK, Springer;Gesellschaft für Informatik e.V. (GI), vol. 66(4), pages 421-440, August.
    • Handle: RePEc:spr:binfse:v:66:y:2024:i:4:d:10.1007_s12599-023-00830-x
    DOI: 10.1007/s12599-023-00830-x
    as

    Download full text from publisher

    File URL: http://link.springer.com/10.1007/s12599-023-00830-x
    File Function: Abstract
    Download Restriction: Access to the full text of the articles in this series is restricted.
    File URL: https://libkey.io/10.1007/s12599-023-00830-x?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Tobias Guggenberger & Jannik Lockl & Maximilian Röglinger & Vincent Schlatt & Johannes Sedlmeir & Jens-Christian Stoetzer & Nils Urbach & Fabiane Völter, 2021. "Emerging Digital Technologies to Combat Future Crises: Learnings From COVID-19 to be Prepared for the Future," International Journal of Innovation and Technology Management (IJITM), World Scientific Publishing Co. Pte. Ltd., vol. 18(04), pages 1-27, June.
    2. Denis Royer, 2013. "EIdM: Concepts, Technologies, and Application Fields," Progress in IS, in: Enterprise Identity Management, edition 127, chapter 0, pages 27-56, Springer.
    3. Simon Feulner & Johannes Sedlmeir & Vincent Schlatt & Nils Urbach, 2022. "Exploring the use of self-sovereign identity for event ticketing systems," Electronic Markets, Springer;IIM University of St. Gallen, vol. 32(3), pages 1759-1777, September.
    4. Rennie Naidoo, 2020. "A multi-level influence model of COVID-19 themed cybercrime," European Journal of Information Systems, Taylor & Francis Journals, vol. 29(3), pages 306-321, May.
    5. Bradford, Marianne & Earp, Julia B. & Grabski, Severin, 2014. "Centralized end-to-end identity and access management and ERP systems: A multi-case analysis using the Technology Organization Environment framework," International Journal of Accounting Information Systems, Elsevier, vol. 15(2), pages 149-165.
    6. Roman Beck & Sven Weber & Robert Wayne Gregory, 2013. "Theory-generating design science research," Information Systems Frontiers, Springer, vol. 15(4), pages 637-651, September.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Alles, Michael, 2018. "Examining the role of the AIS research literature using the natural experiment of the 2018 JIS conference on cloud computing," International Journal of Accounting Information Systems, Elsevier, vol. 31(C), pages 58-74.
    2. Prasad, Acklesh & Green, Peter, 2015. "Governing cloud computing services: Reconsideration of IT governance structures," International Journal of Accounting Information Systems, Elsevier, vol. 19(C), pages 45-58.
    3. Jun Zhuo & Mengmeng Hao & Fangyu Ding & Jiping Dong & Dong Jiang & Shuai Chen, 2024. "The spatiotemporal patterns and driving factors of cybercrime in the UK during the COVID-19 pandemic," Palgrave Communications, Palgrave Macmillan, vol. 11(1), pages 1-10, December.
    4. Ingrid Bauer & Liudmila Zavolokina & Gerhard Schwabe, 2020. "Is there a market for trusted car data?," Electronic Markets, Springer;IIM University of St. Gallen, vol. 30(2), pages 211-225, June.
    5. Andreas Engelmann & Gerhard Schwabe, 2024. "Certified data chats for future used car markets," Electronic Markets, Springer;IIM University of St. Gallen, vol. 34(1), pages 1-22, December.
    6. Sorin-Ciprian Teiusan & Sorin-Constantin Deaconu, 2021. "Artificial Intelligence And Covid-19: An Analysis In Business And Economics," Annals - Economy Series, Constantin Brancusi University, Faculty of Economics, vol. 5, pages 144-156, October.
    7. Heng Tang & Chang Boon Patrick Lee & Kwee Keong Choong, 2017. "Consumer decision support systems for novice buyers – a design science approach," Information Systems Frontiers, Springer, vol. 19(4), pages 881-897, August.
    8. Grant, Delvin & Yeo, Benjamin, 2018. "A global perspective on tech investment, financing, and ICT on manufacturing and service industry performance," International Journal of Information Management, Elsevier, vol. 43(C), pages 130-145.
    9. Vincent Schlatt & Johannes Sedlmeir & Simon Feulner & Nils Urbach, 2021. "Designing a Framework for Digital KYC Processes Built on Blockchain-Based Self-Sovereign Identity," Papers 2112.01237, arXiv.org.
    10. Rainer Alt, 2022. "Electronic Markets on platform culture," Electronic Markets, Springer;IIM University of St. Gallen, vol. 32(3), pages 1019-1031, September.
    11. Sayeed Salih & Samah Abdelsalam & Mosab Hamdan & Ashraf Osman Ibrahim & Anas W. Abulfaraj & Faisal Binzagr & Omayma Husain & Abdallah Elhigazi Abdallah, 2022. "The CSFs from the Perspective of Users in Achieving ERP System Implementation and Post-Implementation Success: A Case of Saudi Arabian Food Industry," Sustainability, MDPI, vol. 14(23), pages 1-24, November.
    12. Matthias Trier & Dennis Kundisch & Daniel Beverungen & Oliver Müller & Guido Schryen & Milad Mirbabaie & Simon Trang, 2023. "Digital Responsibility," Business & Information Systems Engineering: The International Journal of WIRTSCHAFTSINFORMATIK, Springer;Gesellschaft für Informatik e.V. (GI), vol. 65(4), pages 463-474, August.
    13. Wei-Hsi Hung & Yao-Tang Hsu, 2020. "Service Quality and Service Gap of Autonomous Driving Group Rapid Transit System," Sustainability, MDPI, vol. 12(22), pages 1-18, November.
    14. Christos Lemonakis & Nikolaos Sariannidis & Alexandros Garefalakis & Anastasia Adamou, 2020. "Visualizing operational effects of ERP systems through graphical representations: current trends and perspectives," Annals of Operations Research, Springer, vol. 294(1), pages 401-418, November.
    15. Heng Tang & Chang Boon Patrick Lee & Kwee Keong Choong, 0. "Consumer decision support systems for novice buyers – a design science approach," Information Systems Frontiers, Springer, vol. 0, pages 1-17.
    16. Simon Feulner & Johannes Sedlmeir & Vincent Schlatt & Nils Urbach, 2022. "Exploring the use of self-sovereign identity for event ticketing systems," Electronic Markets, Springer;IIM University of St. Gallen, vol. 32(3), pages 1759-1777, September.
    17. Vanessa Kohn & Muriel Frank & Roland Holten, 2023. "How Sociotechnical Realignment and Sentiments Concerning Remote Work are Related – Insights from the COVID-19 Pandemic," Business & Information Systems Engineering: The International Journal of WIRTSCHAFTSINFORMATIK, Springer;Gesellschaft für Informatik e.V. (GI), vol. 65(3), pages 259-276, June.
    18. Laurence Brooks & M. Shahanoor Alam, 2015. "Designing an information system for updating land records in Bangladesh: Action design ethnographic research (ADER)," Information Systems Frontiers, Springer, vol. 17(1), pages 79-93, February.
    19. Bo Yu & Rustam Vahidov, 2019. "Applying Social Interaction Theory to Negotiation Modeling: Design of E-negotiation System," Information Systems Frontiers, Springer, vol. 21(3), pages 703-718, June.
    20. Daum Kim & Jiro Kokuryo, 2024. "Establishing altruistic ethics to use technology for Social Welfare—How Japan manages Web3 and self-sovereign identity in local communities," Electronic Markets, Springer;IIM University of St. Gallen, vol. 34(1), pages 1-12, December.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:binfse:v:66:y:2024:i:4:d:10.1007_s12599-023-00830-x. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.