Forrester

For Security & Risk Professionals

Report:Protecting Enterprise APIs With A Light Touch

By 2012, OAuth Will Be The Incumbent Cloud API Security Solution

Enterprises face a tension between the cloud-friendly software environment promoted by the Web, with its easy-to-use REST interface style and proliferation of lightweight services, and the security...

• Downloads: 648

For Security & Risk Professionals

Blog:Fast Cloud Identity Provisioning

Back in July, I wrote about a new RESTful API that cloud providers and provisioning vendors are working on for doing identity provisioning and synching: Simple Cloud Identity Management, or SCIM...

For Security & Risk Professionals

Blog:Enterprise “Overextended”? You Need To Evolve Your Identity Strategy

The rapid adoption of mobile devices and cloud services together with a multitude of new partnerships and customer-facing applications has extended the identity boundary of today’s enterprise....

For Security & Risk Professionals

Report:Navigate The Future Of Identity And Access Management

Future Look: The Identity And Access Management Playbook

This report outlines the future look of Forrester's solution for security and risk (S&R) executives working on building an identity and access management strategy for the extended enterprise. We...

• Downloads: 1404
• Rating:

For Security & Risk Professionals

Report:Top 15 Trends S&R Pros Should Watch: Q2 2013

From frantic security operations problems to the changing threat landscape, CISOs, senior security leaders, and other IT risk management leaders consistently have trouble keeping up with key trends...

• Downloads: 301
• Rating:

For Security & Risk Professionals

Report:Identify And Influence Identity Stakeholders

Stakeholder Needs: The Identity And Access Management Playbook

This report outlines the stakeholder needs of the Identity And Access Management playbook. Forrester has identified lack of IT executive buy-in and attention as a chronic issue in projects related to...

• Downloads: 377

For Security & Risk Professionals

Client Inquiry:How Retailers Handle Login Expiration Time

How do retailer websites handle login expiration? Is it session-based, login-persisted, 30-day cookie, and so on? What is the norm or best practice?

For Security & Risk Professionals

Client Inquiry:Should We Use OAuth For A Single Security Domain?

My organization is just beginning to externally expose services for our first native mobile application. We currently have a single sign-on (SSO) security infrastructure for our web applications....

For Security & Risk Professionals

Client Inquiry:What Is The Best Way To Achieve Strong Authentication For Extranet Portal?

For a new extranet portal, we're looking for the best way to authenticate strongly 5,000 users all around the world. What is the best way at this time? What way is the easiest to manage?

For Security & Risk Professionals

Report:Introducing Forrester's 2013 Data Privacy Heat Map

To help security and risk professionals navigate the complex landscape of privacy laws around the world, Forrester created a data privacy heat map that highlights the data protection guidelines and...

• Downloads: 650

For Security & Risk Professionals

Blog:Participating In Markets For Portable Identities In The Cloud: What’s The Coin Of Your Realm?

Many IT security pros are moving toward disruptive new authentication and authorization practices to integrate securely with cloud apps at scale. If you’re considering such a move yourself,...

For Security & Risk Professionals

Blog:Zero Trust Identity: Go From "Identity-As-A-Service" To "IAM-As-An-API"

I just love the theme of our upcoming Forrester Security Forum (Las Vegas in May, and Paris in June -- check out Laura Koetzle's definitive blog post). Leapfrog Your Global Competition. Rethink...

For Marketing Leadership Professionals

Report:Introducing Adaptive Intelligence

Why Firms Need To Share Data To Become Customer-Obsessed

Enterprises seeking to better understand their customers, market, and competitive landscape can't afford to limit their insights to only what they already know — the data they generate...

• Downloads: 159

For Security & Risk Professionals

Report:OpenID Connect Heralds The "Identity Singularity"

Prepare For Cloud Security Improvements, Along With A Tincture Of Disruption

Security professionals responsible for diverse types of access management across cloud services, devices, and populations have to pull off a neat trick: control access requests that routinely cross...

• Downloads: 490

For Security & Risk Professionals

Client Inquiry:What Is Forrester's Perspective On Voice-As-PIN And Retinal Security?

Do you have any thoughts on using voice-as-PIN and retinal security, from a security perspective as well as an end user customer-experience perspective?

For Security & Risk Professionals

Tool:Maximum Potential Impacts For Each Assurance Level

For Security & Risk Professionals

Report:Evolve Your Identity Strategy For The Extended Enterprise

Executive Overview: The Identity And Access Management Playbook

The rapid adoption of mobile devices and cloud services, together with a multitude of new partnerships and customer-facing applications, has "extended" the identity boundary of today's enterprise....

• Downloads: 478

For Security & Risk Professionals

Client Inquiry:What Are Our Options For Secure Access Solutions For A Web Interface?

We're looking for secure access solutions for a web interface that will enable some sort of strong authentication but doesn't use a two-factor password token. We're thinking of solutions that allow a...

For Security & Risk Professionals

Report:Understanding Simple Cloud Identity Management

With The SCIM Specifications, User Provisioning Goes "Zero Trust"

Business owners are jumping on SaaS services to get quicker wins, and CIOs are finding these services attractive for cutting costs as well. Since it's relatively quick and easy to hook up these...

• Downloads: 778

For Security & Risk Professionals

Blog:A New Venn Of Access Control For The API Economy

Cloud providers and many federated IAM practitioners are excited about OAuth, a new(ish) security technology on the scene. I’ve written about OAuth in Protecting Enterprise APIs With A Light...

For Security & Risk Professionals

Blog:The Mobile-Cloud Axis Needs A Modern Authorization System. XACML 3 Isn’t It

Andras Cser probed a sore spot in IAM last week with his post, “XACML Is Dead.” It’s a necessary conversation (though I did see a glint in his eye at the Forrester BT Forum after he...

For Security & Risk Professionals

Report:Identity And Access Management: 2012 Budget And Planning Guide

A Review Of Budgets, Spending Intentions, Technology Adoption, And Key Trends

To help Forrester clients with their identity and access management (IAM) strategy for 2011, Forrester predicted four significant trends. So how'd we do? We got two right and two half right. Heading...

• Downloads: 1018
• Comments: 5
• Rating:

For Security & Risk Professionals

Report:The "Venn" Of Federated Identity

Portable Identity Gives New Options To Companies, Consumers, And Clouds

Fast-moving cloud and consumer identity trends are driving shifts in how IT professionals control user access and provide personalized service to networked applications. As IT professionals move to...

• Downloads: 963
• Comments: 1

For Security & Risk Professionals

Blog:Make A Resolution: Kill Your P@55W0rD Policies

It has finally become hip not just to predict the demise of passwords, but to call for their elimination. The recent Wired article makes an eloquent case about the vulnerabilities that even...

For Security & Risk Professionals

Blog:Protecting Internal APIs — Is OAuth Ready For Its Closeup?

Two years ago, the OAuth API protection mechanism was a fairly well-kept secret. It actually won an award at the 2009 European Identity Conference for "best new/improved standard," but most people...