http://blogs.kuppingercole.com/kuppinger Kuppinger Cole + Partner Thu, 26 Jun 2008 07:19:21 +0000 http://backend.userland.com/rss092 en Yes, I know – Information Cards (or Infocards) and their incarnation in Microsoft Windows CardSpace have been around for a while. But it was mainly the inner circle of Identity Management (and especially of user-centric Identity Management) who was really aware of this. With the recent announcement of the Information ... http://blogs.kuppingercole.com/kuppinger/2008/06/26/information-cards-going-public%e2%80%a6/ Context-based authentication and authorization is one of the topics which have the potenzial to become the next hype. I've posted twice on this subject, here and here and we had, led by Dave Kearns, a lot of discussions around this at our EIC 2008. I'm convinced that the topic will become ... http://blogs.kuppingercole.com/kuppinger/2008/06/19/the-secret-leader-in-context-based-authentication-and-authorization/ These days I've read some entries in the Beteo blog, a blog provided by a swiss software and consulting company which is somewhere in between SOA and BSM - or BTO, the term they tend to use due to some affinity to HP. The interesting thing is that Beteo not ... http://blogs.kuppingercole.com/kuppinger/2008/06/13/shouldnt-there-be-a-common-understanding-of-the-term-service/ At EIC 2008 I've presented our view on the relationship of GRC and IAM as well as our definition of the GRC market, the core results of our GRC market report 2008. Basically, the generic GRC tools we see emerging in the market are becoming more and more the business ... http://blogs.kuppingercole.com/kuppinger/2008/06/06/grc-and-iam-you-cant-separate-it/ SaaS is becoming more and more popular, especially in the US. In Europe the growth is much slower, but that is no surprise – Europe is usually some 12 to 36 months behind the US in adopting new technologies. But there is one thing to be considered regarding SaaS – most ... http://blogs.kuppingercole.com/kuppinger/2008/05/21/saas-unmanageable-but-still-successful/ Information Rights Management (IRM) is one of these technologies which isn’t really successful until now, even while it is discussed and available for a pretty long time. IRM is about protecting the information directly, through signatures, encryption and a direct assignment of rights. These rights describe who is allowed to ... http://blogs.kuppingercole.com/kuppinger/2008/05/14/why-information-rights-management-is-mandatory/ Some time ago, as a result of some of the fundamental reorganizations Siemens had to do within the last two years ago, the department responsible for the DirX solutions has been moved into the healthcare unit of Siemens. That was a somewhat unusual place for an identity management product unit. ... http://blogs.kuppingercole.com/kuppinger/2008/05/08/siemens-dirx-back-in-the-iam-market/ These days I have had a briefing with John De Santis, Chairman and CEO of TriCipher, about the new myOneLogin service. This service provides strong authentication and Single Sign-On for SaaS applications, supporting many SaaS apps as well as features like SAML-based federation to the few SaaS providers which are ... http://blogs.kuppingercole.com/kuppinger/2008/05/06/the-quest-for-the-grail-identity-providers-in-the-cloud/ Key Risk Indicators (KRIs) are metrics for Risk. Most of the metrics discussed today focus on either pure business aspects or, with IT and Identity Risk Management, on technical aspects. How long does it take to provision accounts in different systems? How many orphaned accounts do you have in different ... http://blogs.kuppingercole.com/kuppinger/2008/04/29/key-risk-indicators-between-business-and-it/ I have a personal history in the areas of personalization and profiling. And there might be some good chance for these ideas to become reality now - in the context of Infocards and to the sake of VRM (Vendor Relationship Management). The threat in personalization and profiling is to know what ... http://blogs.kuppingercole.com/kuppinger/2008/04/29/infocards-personalization-profiling-vrm-privacy/ One of the newer topics in Identity Management is the Enterprise Entitlement Management. This term describes approaches for a centralized management of the low-level entitlements (e.g. access controls) on system level from a central perspective. That seems to be pretty complex. How shall you ever manage file server ACLs from a ... http://blogs.kuppingercole.com/kuppinger/2008/04/29/file-server-web-services/ One of the panels at the recent EIC 2008 on End-to-End Security for SOA applications there was a discussion about whether this target could really be achieved. One comment was that built-in federation awareness in every single web services won't work with thousands of web services you might have today ... http://blogs.kuppingercole.com/kuppinger/2008/04/29/claims-tokens-end-to-end-security/ Yes, I know - it is a little redundant talking about "corporate" and "business" in the context of virtual cards. But it is one of the most obvious, interesting and feasible business cases around Identity 2.0. What do I mean by that term? My idea is about applying the ideas of ... http://blogs.kuppingercole.com/kuppinger/2008/04/27/virtual-corporate-business-cards/ For some time I planned to write a report on the segmentation of the role management market. There are many different offerings for role management which all use the same buzzwords but provide pretty different solutions. But I decided not to write this report - just because there is no ... http://blogs.kuppingercole.com/kuppinger/2008/04/10/there-is-no-role-management-market-there-is-a-grc-market/ In our briefings with US vendors which aren't that visible in Europe they often claim that they will start to develop the European market soon. Some one or two years later they are still almost invisible in Europe. There are some obviuos reasons why so many US companies fail to ... http://blogs.kuppingercole.com/kuppinger/2008/03/21/how-to-be-successful-in-europe/