A few years ago, advocates for federated ID management said the technology would be in mainstream use by now. That prediction hasn't come to pass for a variety of reasons.
I have always found it tricky to reflect on whether a new technology has met its expectations, unless the technology has been a complete flop or is obviously ubiquitous.
From my perspective, federation is not a flop and it’s not yet ubiquitous, but it is successful. Federation has helped many organizations enhance their businesses, and it successfully has laid important groundwork on which technologies such as SOA and Web services are being built.
While there is no technology magic that can completely overcome the real business issues of liability and trust inherent with federation, I know that there are thousands of organizations around the world using federation today to enable parts of their organizations, using technology from CA and other vendors.
When we look back in 10 years I would predict that in one form or another, a standards-based technology that enables the secure sharing of identity information across the Internet to enable access to applications, data, and other services (aka federation) will in fact be quite commonly used. With federation both being used today and baked into the future via such emerging technologies as Web services, I see the future for federation still being very bright.
Federation is a powerful tool and our experiences have become increasingly positive in the engineering and implementation of SAML 1.1 and 2.0.
In my opinion what is needed to improve adoption is more standards in support of federation meshes or clouds (services to find the home portal for the user and standards by which levels of identity assurance are included).
I believe Liberty will continue to recognize and address this space. At this point the technology is only half there. This will help provide a measurement on which contracts will be more easily solidified.
While you raise some valid points about the slow adoption of Federated Identity Management, it is in fact the very issues you define – time, manpower and money – that are driving the world’s largest aerospace and defense companies to get onboard with this most effective approach to ensuring secure information sharing – across the enterprise and across the world.
Next week, I’ll be on a panel at Digital IDWorld, with Keith Ward of the TransGlobal Secure Collaboration Progam and Northrop Grumman and Jeff Nigriny of CertiPath to talk about how the large A&D companies such as Lockheed Martin, Rolls Royce and Raytheon are in the midst of deploying large scale Identity Federation solutions for their supply chain and in effect are demonstrating just exactly how effective Federated ID can be and why it is well-worth the effort. We’d welcome the chance to directly address any and all skeptics.
Federated ID: An Idea Whose Time Never Came?
A few years ago, advocates for federated ID management said the technology would be in mainstream use by now. That prediction hasn't come to pass for a variety of reasons.
» View Article
I have always found it tricky to reflect on whether a new technology has met its expectations, unless the technology has been a complete flop or is obviously ubiquitous.
From my perspective, federation is not a flop and it’s not yet ubiquitous, but it is successful. Federation has helped many organizations enhance their businesses, and it successfully has laid important groundwork on which technologies such as SOA and Web services are being built.
While there is no technology magic that can completely overcome the real business issues of liability and trust inherent with federation, I know that there are thousands of organizations around the world using federation today to enable parts of their organizations, using technology from CA and other vendors.
When we look back in 10 years I would predict that in one form or another, a standards-based technology that enables the secure sharing of identity information across the Internet to enable access to applications, data, and other services (aka federation) will in fact be quite commonly used. With federation both being used today and baked into the future via such emerging technologies as Web services, I see the future for federation still being very bright.
Federation is a powerful tool and our experiences have become increasingly positive in the engineering and implementation of SAML 1.1 and 2.0.
In my opinion what is needed to improve adoption is more standards in support of federation meshes or clouds (services to find the home portal for the user and standards by which levels of identity assurance are included).
I believe Liberty will continue to recognize and address this space. At this point the technology is only half there. This will help provide a measurement on which contracts will be more easily solidified.
While you raise some valid points about the slow adoption of Federated Identity Management, it is in fact the very issues you define – time, manpower and money – that are driving the world’s largest aerospace and defense companies to get onboard with this most effective approach to ensuring secure information sharing – across the enterprise and across the world.
Next week, I’ll be on a panel at Digital IDWorld, with Keith Ward of the TransGlobal Secure Collaboration Progam and Northrop Grumman and Jeff Nigriny of CertiPath to talk about how the large A&D companies such as Lockheed Martin, Rolls Royce and Raytheon are in the midst of deploying large scale Identity Federation solutions for their supply chain and in effect are demonstrating just exactly how effective Federated ID can be and why it is well-worth the effort. We’d welcome the chance to directly address any and all skeptics.
Dirty Tricks: Social Engineers' Favorite Pickup Lines
Tabletop Exercises: 3 Sample Scenarios
19 Ways to Build Physical Security Into Your Data Center
Get instant notifications when whitepapers, webcasts and case studies are added to our library. Sign up for a Resource Alert now!
CSO Corporate Partners
» More blogs
CSO Perspectives
Santa Clara, California
(ISC)2 members can earn up to 24 CPE Credits!
Trend Micro ranked #1 against real-world malware. Read more.
64-page prescriptive guide to security, compliance, and IT operations.
Removing Barriers To Better Server Virtualization Efficiency
Mining for Gold: Cybercrime Prevention and the Role of Log Management
The Executive Guide to Data Loss Prevention
Organizations can spend up to 50% more on compliance efforts than necessary.
White Paper: A Security Blueprint Delivered From within the Network
Read the RSA report: Security for Business Innovation
Upgrading to VMware vSphere with vWire
Explore the increasing importance of log management as cybercrime threats grow.
The Tripwire HIPAA Solution: Meeting the Security Standards Set Forth in Section 164
Implementing Best Practices for Web 2.0 Security
Five Ways to Reduce Your IT Audit Burden
THE IDG NETWORK