IRM versus IAM - 2 very different worlds!

A picture says it all.

To put it simply, IAM is all about compliance (authentication + identity management + governance) within an enterprise security parameter with a population size usually less than 50,000. In fact, a figure of >30,000 workforce with partners are not usually seen.

IRM goes beyond an enterprise and it's about the Internet of Things. It is usually sized to support a population of more than a million. It's a totally different playing ground.

That's fun! :)

.

Internet of Things

Everyone is talking about "Internet of Things" these days … Today, I came across an article from CA which talks about the same topic. The same article makes reference to ISACA - 2013 IT Risk/Reward Barometer.

The following chart is interesting as it also highlights the consumers' concern ("Not knowing who has access to information collected by connected devices"), which is quite alarming high to me - 44%.

The survey also captures the type of Governance Issues that comes with Internet of Things.

The top 3 are:

1. Increased security threats

2. Data privacy

3. Identity / access management

Yes, IAMS has a room to play in the Internet of Things ….  As I always say,  Cloud, Mobile, Social is not going to go away anytime soon. They will just get bigger, and we should better prepared ourselves for them.

.

ForgeRock Customer Support Services

I have customers asking me what are the types of support they can get from ForgeRock Subscription.

I might as well share it here.

Read Customer Support Data Sheet for detail.


.

Salesforce Identity Connect . ForgeRock Bridge SPE

Here I am attending ForgeRock European Summit in France this week, and I am glad Salesforce has chosen ForgeRock Bridge Service Provider Edition (Bridge SPE) to deliver Salesforce Identity Connect to create a bridge between existing on-premise directory solutions and Salesforce.

You can read the press release here. 

This is great! The momentum has finally caught on... Time to move faster! :)

.

ForgeRock Business Model

This question keeps repeating the ForgeRock user forum. I think I might as well paste it here in case my customers ask me the same.

To be honest, this is fair model. The engineers also need to feed their families. We can't expect every single piece of source code be made publicly available.

.

Open Identity Bridge

During the Open Identity Summit, we were presented a pre-release version of the upcoming Open Identity Bridge from ForgeRock (due to be released later half of this year).

To me, this is a very cool product. Technically, it is nothing too complicated. It is actually "lego"-ly built from ForgeRock OpenIDM/OpenICF (for Sync/Recon) and OpenAM (for Single Sign-On).

Who is the target customer?

Any corporate enterprise that has a Microsoft Active Directory where all their staff information are stored. In addition, the typical business applications are all cloud-based (e.g. Salesforce for CRM, Google Apps for emails).

PS: Of course, the directory need not be a Microsoft Active Directory. (But, yes, typically 80-90% of the enterprises are using AD)

How to use Identity Bridge?

Instead of deploying a standalone OpenIDM to provision users and then deploying another standalone OpenAM to establish federations among the various cloud applications, Identity Bridge is installed and configured to do the same job, within minutes. 

The installation and configuration is so simple and the software itself is so light-weight. The intuitive UI is the winner, IMHO.

I hope I can show you more of the Identity Bridge, but I only have the following login screen to show for now. :) 

But, believe me, it's very cool!

.