Abstract: A visualization depicting visual relationships between identities and entitlements is provided by a visualization device to enable patterns corresponding to the relationships to be readily identifiable. Initially, data comprising identities and entitlements is received and utilized to create the visualization. The visualization is optimized to depict potential risks associated with selected identities and corresponding entitlements. An interaction directed to a particular identity or a particular entitlement that is depicted as a potential risk by the visualization is received that causes a rule to be created for the particular identity or the particular entitlement. The risk may be manually or automatically directed to a security department or automated provisions system where the risk associated with the particular identity or the particular entitlement is mitigated by modifying rights of the particular identity for the particular entitlement.

Abstract: In one embodiment, a system includes a memory, an interface configured to communicate with a network and a processor configured to receive, from a first source on the network, an unconfigured application. The processor may be further configured to send a first request to the second source for configuration parameters associated with the unconfigured application and receive, from the second source in response to the request, a first set of configuration parameters. The processor may also be configured to configure the unconfigured application using the first set of configuration parameters.