| The other federation technology While we've seen, over the past few issues, that federated provisioning still has a long way to go there's another technology, an older technology, which might bear another look. Federated provisioning could exist Today we'll wrap up our current discussion of federated provisioning. That's easy, because there really is no such thing today. But there might be if reason prevails. Let me tell you about it. How a universal directory might work Provisioning across organizational boundaries using either traditional technologies or those associated with federation has been our subject the past few issues. In the last newsletter, the subject of a universal directory was mentioned. Today let's see how that might work. Identity Governance Framework sprints to the finish line Setting a pace that the IETF and other slow-moving standards bodies could envy, the Liberty Alliance announced last week the completion of market requirements document (MRD) for the Identity Governance Framework (IGF). ... Novell includes Windows CardSpace in Novell Access Manager I haven't chatted with the folks from Novell in a while, so I was glad of the opportunity to talk with Lee Howarth, product manager for Novell's Access Manager last week about the new release - Version 3.1 - of the ... The 2 billion entry directory tree It's deja vu. I got a note from Oracle's Technology media marvel (and soon to be media mother) Rebecca Hahn touting a new study, commissioned by Oracle, from the Performance Engineering Group at Persistent Systems. It's ... Enterprise Provisioning vs. Federated Provisioning When last we spoke I left you thinking about deprovisioning both your people from apps you don't control or your apps from people you don't control. It's a big issue with software-as-a-service (SaaS) and federated provisioning. It was the Burton Group's Ian Glazer who said: "...there should be no reason why deprovsioning from an application like Salesforce.com is any harder than deprovisioning from LDAP." And, in truth, maybe it isn't. Provisioning and federation Federated provisioning is the topic, and the raging dispute about its pros and cons is today's subject. It started with the comment by Daniel Wakeman (CIO, Educational Testing Service), who said "It's a 'huge shortcoming' that SaaS [Software-as-a-Service] vendors do not embrace 'federated identity management' standards allowing centralized identification and validation of users via a single sign-on process..." The promise of provisioning Way back in the dark ages, 10 whole years ago, I first wrote about provisioning as the "killer app" for Identity Management. Actually, I called it the killer app for directory services, since the identity management tag hadn't yet been promulgated. In a piece I wrote for Novell's Web site (now, sadly, no longer available), I touted Business Layer's eProvision Employee application and talked about what was to come. Sometimes prognosticators are wrong. Enter for a Microsoft training giveaway from New Horizons New Horizons Computer Training is offering a free Microsoft training course worth up to $2,500 to be given to one lucky Microsoft Subnet reader. Deadline for entry is March 31. Network World on Twitter Get our tweets and stay plugged in to networking news. |
No comments:
Post a Comment