Hi all! Here you can find an interesting list and evaluation of open source identity management systems by Radovan Semančík, software architect working for Evolveum and nLight. In his analysis, Radovan make a comparison among MidPoint, OpenIAM, OpenIDM, Syncope. [read more...]
I had the chance to have a short interview with Radovan Semancik, architect of the really interesting midPoint project. Here the transcript! Thanks again to Radovan for his patience!
I had an interesting discussion with Identropy’s folk Ash Motiwala, about his blog entry over at the Identropy blog on developing a Deprovisioning Policy.
[read more...]
In this post, that follows the first of the series, we will go through the installation of Velo server and all its pre-requirements. It’s important to note that all the instructions reported here should be replicated only for testing purposes and not in production environments. The main aim is to evaluate the identity management features of the software and not to show how the software should be installed, configured, and used in real use cases. Aspects as software optimizations, hardening and so on are out of topic. [read more...]
Since I’ve noticed a lot of interest around open source IAM projects, I thought that an “Open source LAB” blog series could be useful to provide some information gathered during my practical investigations, in the hope to be helpful for corporations deploying their open source identity management solution.
The first projects I would like to evaluate is Velo developed by Safehaus.org. Velo is an open source user provisioning software that helps company by automating many administrative tasks associated with user account setup and maintenance and it seems to be one of the most promising IAM suites available.
This post is to recommend you a new white paper by Hitachi: “Best Practices for Identity Management Projects”.
The paper presents some best practices related to project management topics useful deploying and operating an identity management infrastructure.
Identropy’s blogger Ash Motiwala has started an interesting series on developing an identity management roadmap.
“I thought a blog series was in order to provide some of our insights into aiding corporations develop an Identity Management Roadmap (which is a step by step guide for your organization to follow when deploying an identity management solution). I got a chance to sit down and interview some of our 10+ year identity gurus to collect some of their golden nuggets of identity wisdom for this series. Heck, this may even inspire and enable some of you ambitious folks out there to develop an IDM Roadmap for your organizations yourselves!” Ash says in the first post of the series.
A quite recent Burton’s research found that organizations that deploy provisioning products rarely achieve their objectives during the first project iteration.
While these provisioning projects address some important challenges, they rarely address all the initial expectations and, even if they meet their goals, they result in high maintenance costs and in the inability to adapt to changing needs also in organizations that are on their second or third iteration of a provisioning product deployment.
Here I am going to provide a small set of identity and access management best practices that enterprises can benefit from to better approach new or revised IAM initiatives that, for their nature are, often complex and expensive.
Some days ago I was wondering why among the enterprise level Identity and Access Management (IAM) infrastructures, I’ve never seen an open source solution.
The main driver of my curiosity was the following question: Why small and medium size companies spend a lot of money to pay very expensive licenses for products offering features that they will never use? Why companies which require only few simple identity provisioning and access control tasks don’t use open source solutions?
Then, I started a brief research on one of the most publicized open source identity management project: SUN Identity Management Community Project.