NomadID: Identity Management for Disconnected (DDIL) Scenarios - 20wk Implementation

Oxford Computer Group LLC

Adaptable single sign-on and security using Microsoft Entra ID for agencies operating in disconnected scenarios.

The Challenge

Disconnected, Denied, Intermittent, and Limited Bandwidth (DDIL) environments pose significant challenges for secure identity and access management. Military and tactical operations must retain access to mission-critical systems even when disconnected from enterprise networks. This includes having a flexible and resilient Identity, Credentialing and Access Management (ICAM) solution that enables agencies to maintain uninterrupted application access during outages. Traditional Cloud and SaaS based ICAM solutions fall short in fully supporting these scenarios.

The Solution: NomadID

Oxford Computer Group, a Major Key Technologies Company, built a comprehensive ICAM solution tailored for DDIL environments: NomadID.

This solution integrates with Microsoft Entra ID and Strata Identity's Identity Orchestration for identity management, authentication, and governance at the edge. NomadID's components fit into a compact, mobile package deployable anywhere agencies require. It supports Single-Sign-On (SSO) and secure provisioning even in disconnected operations.

Key Features and Capabilities:

  • Hyper Scaler Integration: Synchronize identities and entitlements from cloud IDPs to local applications.
  • DDIL Cutover and Failback: Seamless migration of ICAM services between enterprise and DDIL environments with security analysis before reconnection.
  • Authentication: SSO support for local applications in disconnected mode.
  • Identity Governance: Role-based access control
  • Orchestration: Intelligent routing of authentication requests based on network availability.
  • Support for Modern Protocols: OAuth 2.0, OpenID Connect, SAML 2.0, and legacy protocols, i.e. Kerberos.
  • SIEM Integration: Local and enterprise-level logging for security monitoring and analysis.

High-Level Implementation Overview

Week Phase Description
Weeks 1-4 Discovery & Infrastructure Build Engage stakeholders to define functional and technical requirements to integrate with identified applications (e.g., Tactical Assault Kit (TAK)) and create a Technical Design Document to design the solution integration points.
Weeks 5-14 Solution Configuration Install and configure NomadID on client-provided environment that meets project minimum requirements and integration with five modern applications identified in the Discovery Phase.
Weeks 15-16 User Acceptance Testing User Acceptance Testing (UAT) and deployment prep to production, and detailed documentation.
Weeks 17-20 Go-Live & Support Go-Live, Support and End-user training.

Note: A minimum of five applications and five deployments is required. Each deployment is customized to the agency's requirements. Project duration and costs vary.

https://store-images.s-microsoft.com/image/apps.47369.172a31fb-667c-472b-8ac2-f0c594326978.04ad13c5-cc1c-475e-b98d-90307cc2e811.3e4354aa-5a05-4268-8ceb-37e782415f2e
https://store-images.s-microsoft.com/image/apps.47369.172a31fb-667c-472b-8ac2-f0c594326978.04ad13c5-cc1c-475e-b98d-90307cc2e811.3e4354aa-5a05-4268-8ceb-37e782415f2e