Hi all! Here you can find an interesting list and evaluation of open source identity management systems by Radovan Semančík, software architect working for Evolveum and nLight. In his analysis, Radovan make a comparison among MidPoint, OpenIAM, OpenIDM, Syncope. [read more...]
I had the chance to have a short interview with Radovan Semancik, architect of the really interesting midPoint project. Here the transcript! Thanks again to Radovan for his patience!
I had an interesting discussion with Identropy’s folk Ash Motiwala, about his blog entry over at the Identropy blog on developing a Deprovisioning Policy.
[read more...]
A quite recent Burton’s research found that organizations that deploy provisioning products rarely achieve their objectives during the first project iteration.
While these provisioning projects address some important challenges, they rarely address all the initial expectations and, even if they meet their goals, they result in high maintenance costs and in the inability to adapt to changing needs also in organizations that are on their second or third iteration of a provisioning product deployment.
Here I am going to provide a small set of identity and access management best practices that enterprises can benefit from to better approach new or revised IAM initiatives that, for their nature are, often complex and expensive.
Some days ago I was wondering why among the enterprise level Identity and Access Management (IAM) infrastructures, I’ve never seen an open source solution.
Sun claims “to open sourcing all of its identity management software products by early 2011″ but in the meanwhile, is there any complete, enterprise level, open source identity & access management suite?
If not, is there any set of open source components that can be combined together to build a complete IAM suite?
Openadaptor is an open source Java toolkit that may be classified as a lightweight Enterprise Application Integration (EAI) solution. The toolkit provides a framework and components for building links between systems and various middleware solutions.
In every identity management solution there is one identity management system and one or more managed systems, also known as target or resource systems.
Identity synchronization is the task of synchronize identity data across a wide range of heterogeneous applications, directories, databases, and other data stores that are connected to the identity management system in order to capitalize its provisioning capabilities and, inherently, all the benefit that the identity management systems brings.
So, we can say that the main duties of identity synchronization is to keep synchronized and aligned identity data stored across different systems.
There are many identity management products and solutions on the market that supply functionalities such as provisioning, SSO, authorization, authentication, auditing, data consolidation, and so on. This is where identity management solution providers are concentrating most of their efforts in the last years.
As exposed by Joe Pato et al. in “On Adaptive Identity Management: The Next Generation of Identity Management Technologies”, this landscape must change.
Googling around on the web looking for some white papers on identity and access management architectures and guide lines, I’ve found this interesting video provided by TechTarget in their “How to build an identity and access management architecture” series.
In this speech, Richard Mackey explores the essentials of identity and access management, from the definition of digital identity to the most common identity and access management architectural issues.
This video explores different aspects about identity within organizations and covers topics such as access management fundamentals, centralized and de-centralized identity management models, and best practices for integrating commercial products.
To be honest that’s a basic introduction to this complex world but, despite that, it’s very well organized and exposed, and offers some challenging food for thought and tips on some interesting web resources to which refer.