Blog
NSTIC Update
by Craig Burton
National Institute of Standards and Technology awards $9M to support trusted identity initiative Introduction On September 20, 2012, the National Institute of Standards and Technology ( NIST ) announced more than 9 million USD dollars of grant awards in support of the National Strategy for Trusted Identities in Cyberspace ( NSTIC ). The grants were awarded to five consortiums. All of the big. All of them representing different views and technologies with strong focus on identity, security, and trust. NSTIC Background While many identity and security professionals are familiar with...
Blog
Salesforce Identity
by Craig Burton
Identity Management as a Service (IdMaaS) gets a new 500lb guerilla Introduction When I first heard of Salesforce’s Identity announcements this week at Dreamforce , I was reminded of the old joke “Q:Where does a 500lb. gorilla sit? A: Anywhere he wants.” Salesforce Identity makes Salesforce the new 500lb gorilla in the Digital Identity jungle. Announcement Details You can read the basic details of the announcement on Chuck Mortimore’s blog . Here is a quick summary: What is Salesforce Identity? Salesforce Identity provides Identity and Access...
Blog
SAML is Dead! Long Live SAML!
by Craig Burton
Answers to the unanswered questions from the webinar Introduction Last Friday on Sept. 14, Pamela Dingle—Sr. Technical Architect from Ping Identity Corp.—and I conducted a free webinar about the much ballyhooed demise of SAML. You can view the webinar in its entirety on the KuppingerCole website. To us, the best measurement of interest in any given webinar is the drop off rate. Just how many people drop off during the presentation? We were very pleased in the interest of the topic for the number of attendees and for that fact that no one dropped off from the presentation and...
Blog
Identity in a Post-PC Era
by Craig Burton
How 400M iOS devices changes everything Most of the planet at least paid a little bit of attention to the announcement of the iPhone 5 on Sept. 12 th . The anticipation for the announcement was so high, that sales of the iPhone 4 and iPhone 4s actually dipped some in the last quarter. While I like all of the things Apple has done with the new iPhone — and I have already ordered mine — I found the other information given at the announcement to be astounding. The numbers — presented in the keynote by CEO Tim Cook — were more than just significant. Especially when viewed from the...
Blog
Making Good on the Promise of IdMaaS
by Craig Burton
As a follow up to Microsoft’s announcement of IdMaaS, the company announced the — to be soon delivered — developer preview for Windows Azure Active Directory (WAAD). As John Shewchuk puts it: The developer preview, which will be available soon, builds on capabilities that Windows Azure Active Directory is already providing to customers. These include support for integration with consumer-oriented Internet identity providers such as Google and Facebook, and the ability to support Active Directory in deployments that span the cloud and enterprise through synchronization technology....
Blog
Freedom of Choice != Your Choice of Captor
by Craig Burton
Earlier this week I posted a first-look analysis of Microsoft’s Cloud-based Identity Metasystem (IDMaaS). In that analysis I stated: Microsoft is not only doing something innovative — but profoundly innovative. On June 7, Nishant Kaushik (Chief Architect at Identropy) wrote on his blog (How Do Governance Controls fit into IDMaaS?): I’ll be honest, I’m having a little trouble seeing what is so innovative about WAAD itself. How is the fact that becoming an Office 365 customer automatically gives you an AD in the cloud that you can build/attach other Azure applications to that...
Blog
LinkedIn Hacked—More Reason for IdM in the Cloud
by Craig Burton
On June 6, 2012 LinkedIn was hacked and user accounts — names and passwords — were compromised . Follow LinkedIn’s advice on addressing the matter. There are just two things I want to say about this. 1. Service Providers should build hardened systems up-front Any service provider that has a security architecture that stores names and passwords on a server somewhere has an unacceptable system design. There is simply NO excuse for letting this happen — EVER. LinkedIn management is acting like hashing and salting passwords is some new thing that they are all over as a...
Blog
What I would like to see First from IDMaaS
by Craig Burton
Intro Kim Cameron and John Shewchuk jointly rolled out Microsoft’s vision of Identity Management (IDMaaS) as a Service and then Microsoft’s implementation of that vision as Windows Azure Active Directory (WAAD). I posted first impressions . Kim Cameron responded. This morning over coffee I was gesturing through Zite — the iPhone and iPad personal publishing review app. There was my blog post in the headlines. I realize that Zite personalizes the headlines so probably no one else saw that, but that seemed pretty cool. Anyway, it got me to thinking what kind of things...
Blog
Microsoft is Finally Being Relevant
by Craig Burton
Surprise surprise. For the last few years it looked as if the battling business units and power struggles within Microsoft had all but rendered the company incapable of doing anything innovative or relevant . But clearly something has happened to change this lack of leadership and apparent stumbling in the dark. Microsoft is not only doing something innovative — but profoundly innovative. In a dual post by Microsoft’s John Shewchuk and Kim Cameron , the announcement was made about what Kim Cameron alluded to at the KuppingerCole EIC in April — Identity Management as a Service...
Blog
Is API Growth in a Stall?
by Craig Burton
Intro Last year when we published the API Economy document , we showed the growth rate of APIs over time. Examining the numbers from the same source — the ProgrammableWeb — in 2012 it appears as if the hockey stick growth of over 100% each year is starting to slow down. What is really happening? The numbers Figure 1 shows the original numbers we published in the Open API Economy report. It shows a compound annual growth rate of roughly 100% each year starting in 2005. The source of the numbers is the ProgrammableWeb. Figure 1: 100% Annual Growth Rate. Source: The...