Forrester

For Security & Risk Professionals

Blog:Protecting Internal APIs — Is OAuth Ready For Its Closeup?

Two years ago, the OAuth API protection mechanism was a fairly well-kept secret. It actually won an award at the 2009 European Identity Conference for "best new/improved standard," but most people...

For Security & Risk Professionals

Blog:A New Venn Of Access Control For The API Economy

Cloud providers and many federated IAM practitioners are excited about OAuth, a new(ish) security technology on the scene. I’ve written about OAuth in Protecting Enterprise APIs With A Light...

For Security & Risk Professionals

Report:Forrester's Data Privacy Heat Map Supplement

To help security and risk professionals navigate the complex landscape of privacy laws around the world, Forrester created a data privacy heat map that highlights the data protection guidelines and...

• Downloads: 78
• Rating:

For Security & Risk Professionals

Report:Outsourcing Identity Assurance Will Be A Realistic Option Within Three Years

The Language Of Levels Clarifies The Value Of Assurance

Consumer-facing web applications are beginning to rely on third-party identity providers (IdPs) for user identification, authentication, and attributes delivered at runtime. This reduces costs and...

• Downloads: 620

For Security & Risk Professionals

Blog:Strong Authentication: Bring-Your-Own-Token Is Number Three With A Bullet

In approaching the research for my recently published TechRadar™ on strong authentication, at first I struggled a bit with overlapping concepts and terminology (as can be seen in the lively...

For Security & Risk Professionals

Report:Identity And Access Management: 2012 Budget And Planning Guide

A Review Of Budgets, Spending Intentions, Technology Adoption, And Key Trends

To help Forrester clients with their identity and access management (IAM) strategy for 2011, Forrester predicted four significant trends. So how'd we do? We got two right and two half right. Heading...

• Downloads: 1018
• Comments: 5
• Rating:

For Security & Risk Professionals

Report:Apply Identity And Access Management Techniques To Consumer Data

Personal Identity Management

Customer intelligence (CI) professionals face increasing pressure to give consumers greater control over the data that organizations collect about them. Forrester has published a report predicting...

• Downloads: 327

For Security & Risk Professionals

Blog:Fast Cloud Identity Provisioning

Back in July, I wrote about a new RESTful API that cloud providers and provisioning vendors are working on for doing identity provisioning and synching: Simple Cloud Identity Management, or SCIM...

For Security & Risk Professionals

Report:Understanding Simple Cloud Identity Management

With The SCIM Specifications, User Provisioning Goes "Zero Trust"

Business owners are jumping on SaaS services to get quicker wins, and CIOs are finding these services attractive for cutting costs as well. Since it's relatively quick and easy to hook up these...

• Downloads: 779

For Security & Risk Professionals

Blog:Identity Protocol Gut Check

Protocol gut check. That's how someone recently described some research I've got under way for a report we're calling the "TechRadar™ for Security Pros: Zero Trust Identity...

For Security & Risk Professionals

Report:The Forrester Wave™: Enterprise Cloud Identity And Access Management, Q3 2012

Six Vendors That Matter Most And How They Stack Up

In Forrester's 15-criteria evaluation of cloud identity and access management (IAM) vendors, we identified the six most significant solution providers in this category — Covisint, Lighthouse...

• Downloads: 1164
• Rating:

For Security & Risk Professionals

Report:Protecting Enterprise APIs With A Light Touch

By 2012, OAuth Will Be The Incumbent Cloud API Security Solution

Enterprises face a tension between the cloud-friendly software environment promoted by the Web, with its easy-to-use REST interface style and proliferation of lightweight services, and the security...

• Downloads: 649

For Security & Risk Professionals

Blog:OpenID, Successful Failures And New Federated Identity Options

If you're a security and risk professional in charge of protecting consumer-facing applications, you may have heard that OpenID is a “toy,” or it's an insecure protocol, or other...

For Security & Risk Professionals

Report:Introducing Forrester's 2013 Data Privacy Heat Map

To help security and risk professionals navigate the complex landscape of privacy laws around the world, Forrester created a data privacy heat map that highlights the data protection guidelines and...

For Security & Risk Professionals

Client Inquiry:What Is The Best Way To Achieve Strong Authentication For Extranet Portal?

For a new extranet portal, we're looking for the best way to authenticate strongly 5,000 users all around the world. What is the best way at this time? What way is the easiest to manage?

For Marketing Leadership Professionals

Report:Introducing Adaptive Intelligence

Why Firms Need To Share Data To Become Customer-Obsessed

Enterprises seeking to better understand their customers, market, and competitive landscape can't afford to limit their insights to only what they already know — the data they generate...

• Downloads: 147

For Security & Risk Professionals

Report:The Forrester Wave™: Risk-Based Authentication, Q1 2012

The Six Vendors That Matter Most And How They Stack Up

In Forrester's 16-criteria evaluation of risk-based authentication vendors, we identified the six significant vendors in this category — CA Technologies, Entrust, iovation, RSA, Symantec, and...

• Downloads: 1064

For Security & Risk Professionals

Report:TechRadar™ For Security Pros: Zero Trust Identity Standards, Q3 2012

Road Map: The Identity And Access Management Playbook

This report outlines Forrester's solution to help security and risk (S&R) leaders develop their road map of IAM processes using Forrester's TechRadar™ methodology. The extended enterprise...

• Downloads: 454
• Rating:

For Security & Risk Professionals

Tool:Maximum Potential Impacts For Each Assurance Level

For Security & Risk Professionals

Blog:Can You Join The API Economy While Maintaining Top-Notch Security?

If anything exemplifies the extended enterprise, it's the notion of the "API economy": Unlocking value in your organization's unique data and services by publishing open APIs (application...

For Security & Risk Professionals

Blog:Enterprise “Overextended”? You Need To Evolve Your Identity Strategy

The rapid adoption of mobile devices and cloud services together with a multitude of new partnerships and customer-facing applications has extended the identity boundary of today’s enterprise....

For Security & Risk Professionals

Client Inquiry:What Are The E-Signature Authentication Methods And Mechanisms, And Who Are The Providers?

Our employees are being asked to electronically sign documents from outside our organization. We want to educate these employees on various aspects of the e-signature process. One area is...

For Security & Risk Professionals

Blog:Identity Assurance Means Never Having To Say “Who Are You, Again?”

A decade after launching the SAML standard and seeing its, shall we say, stately pace of adoption, it’s wild to see real single sign-on and federated attribute sharing starting to take off for...

For Security & Risk Professionals

Blog:The Mobile-Cloud Axis Needs A Modern Authorization System. XACML 3 Isn’t It

Andras Cser probed a sore spot in IAM last week with his post, “XACML Is Dead.” It’s a necessary conversation (though I did see a glint in his eye at the Forrester BT Forum after he...

For Security & Risk Professionals

Blog:CardSpace Is Dead. Long Live Back-Channel Access.

Microsoft announced during last week's RSA conference that it would not be shipping Windows CardSpace 2.0. A lot of design imperatives weighed on that one deliverable: security, privacy,...