For Security & Risk Professionals

The Forrester Wave™: Identity And Access Management, Q4 2009

Oracle, CA, And IBM Lead, With Novell And Sun Microsystems Close Behind

by Andras Cser, November 3, 2009

In Forrester's 79-criteria evaluation of identity and access management (IAM) vendors, we found that Oracle, CA, and IBM lead the pack because of a rich IAM portfolio (both organically developed and acquired), an understanding of a rapidly changing market, . . .

For Security & Risk Professionals

Best Practices: Implementing Strong Authentication In Your Enterprise

Kill Two Birds With One Token

by Bill Nagel, July 23, 2009

The adoption of strong multifactor authentication (MFA) is on the rise. It's often the first port of call on the journey to a fuller identity and access management implementation; MFA directly addresses the password problem, which is a well-known and . . .

For Enterprise Architecture Professionals

EA: Incorporate Enterprise Role Management Into Your Architecture Strategy

by Henry Peyret, July 15, 2009

Adoption of enterprise role management tools is increasing dramatically as a result of compliance and cost pressures. Enterprise role management tools simplify the provisioning and deprovisioning of employee and contractor access to resources, enabling . . .

For Security & Risk Professionals

IT Security's Critical Role During Layoffs

How To Safeguard Company Data In Difficult Times

by Andrew Jaquith, July 2, 2009

The Gateway Recession of 2009 has brought the prospect of slowing sales and profits — and job losses. Although layoffs are never desirable, they are often necessary. Much of the responsibility for keeping company data safe during layoffs falls to security . . .

For Security & Risk Professionals

Market Overview: Enterprise Role Management

Access Recertification And Role Management Converge, Integrate With Provisioning

by Andras Cser, February 6, 2009

Enterprise role management, role mining, and access recertification help enterprises with maintaining segregation of duties, keeping up with regulatory compliance requirements, and automating role-based provisioning to enterprise applications — even through . . .

For Security & Risk Professionals

Inquiry Spotlight: Identity And Access Management, Q4 2008

by Andras Cser, October 6, 2008

Identity and access management (IAM) continues to be a major topic of interest for security professionals. Between July 2007 and June 2008, Forrester's security and risk management team fielded 1,798 inquiries on a variety of topics — 291 of which were . . .

For Security & Risk Professionals

Best Practices: Enterprise Role Management

by Andras Cser, September 30, 2008

Enterprise role management plays a central role in efficiently managing access rights and enforcing access policies such as segregation of duties (SoD). The processes and tools related to role management consist of role mining and design, recertification, . . .

For Security & Risk Professionals

Privileged User Management Market Overview

Centrally Managing System Administrator And Application Credentials

by Andras Cser, June 30, 2008

Managing privileged users' access to sensitive systems needs to be centralized, policy-driven, and automated: Manual paper- or spreadsheet-based solutions are insecure, expensive, don't scale, and can't be sufficiently audited. Privileged user and password . . .

For Security & Risk Professionals

Forrester TechRadar™: Identity And Access Management, Q2 2008

Market Seeks Solutions That Support Business And IT Flexibility And Compliance

by Andras Cser, June 18, 2008

Identity and access management (IAM) continues to be a fragmented field of disjointed technologies with difficult and expensive implementation cycles and even more costly efforts in the wake of bad technology decisions. Products that give quick answers . . .

For Security & Risk Professionals

Topic Overview: Identity And Access Management

by Andras Cser, April 14, 2008

Identity and access management (IAM) is the entire aspect of maintaining a person's complete set of information, spanning multiple identities and establishing the relationship among these various identities with the goal of improving data consistency, . . .

For Security & Risk Professionals

User Account Provisioning For The Midmarket

Why Projects Fail And How To Achieve Success

by Andras Cser, August 20, 2007

Smaller enterprises (those with 1,000 to 5,000 employees) are an underserved market when it comes to user account provisioning. They are large enough to benefit from the efficiencies and controls that the technology provides, but they are not large enough . . .

IBM Addresses Complex Provisioning Needs With Open And Flexible Solution

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

IBM Tivoli Identity Manager (TIM) has improved significantly during the past few years. IBM has opened up the product to ease integration and customization; it has also improved the manageability and flexibility of roles, policies, and delegation. This . . .

Hewlett-Packard Offers Standards-Based, Scalable Provisioning

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

HP OpenView Select Identity has the foundation to be a market-leading product. It has a near-religious commitment to Java and XML standards, and the architecture has been well proven in several large deployments. The absence of a few key features underscores . . .

Novell Provisioning Excels At Managing Data And Policies

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

Novell Identity Manager has solid overall functionality, with notable strengths in data management — thanks to its metadirectory underpinnings. Some of Novell's more advanced workflow and self-service features require a bit more configuration and customization . . .

Microsoft Focuses On Provisioning To Core Infrastructure

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

Microsoft Identity Integration Server (MIIS) is a good tool for coarse-level user administration across a fairly narrow set of systems. It represents a simple, low-cost alternative to heavyweight provisioning products for Microsoft-centric environments . . .

Thor Technologies Offers A Standalone, Enterprise-Class Provisioning Solution

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

Thor Technologies has one of the most functionally rich solutions of all the provisioning products that Forrester evaluated. Its only weaknesses were Xellerate Identity Manager's lack of a track record in large deployments supporting several hundred thousand . . .

BMC Software Brings Powerful Security And Compliance Features To Provisioning

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

BMC Software is far along in its efforts to modernize its provisioning solution. Its new package, BMC User Administration and Provisioning, boasts improvement in the areas of workflow, user administration, and password management. The solution retains . . .

Sun Leads In Provisioning, Offering Both High Functionality And Ease Of Use

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

By a large margin, Sun Java System Identity Manager came in as the most function-rich solution in Forrester's evaluations. The product led all of its competitors in several categories: connector functionality, policy management, auditing, and architecture. . . .

CA Provisioning Delivers Strong Auditing And Administration Atop A Robust Architecture

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

eTrust Admin is a solid, all-around product — strong on architecture and auditing. The integration of Netegrity's IdentityMinder addresses prior shortcomings in user administration and password management. CA has a rich and unique portfolio of integrated . . .

The Forrester Wave™: User Account Provisioning, Q1 2006

Sun Microsystems Leads In Our Product Evaluation

by Jonathan Penn, January 30, 2006

Forrester evaluated leading user account provisioning vendors across 125 criteria and found that Sun Microsystems is a market leader for a reason — its product delivers superior provisioning functionality with the highest ease of use. BMC Software . . .

Courion Offers An Independent And Highly Interoperable Provisioning Solution

The Forrester Wave™ Vendor Summary, Q1 2006

by Jonathan Penn, January 30, 2006

Courion's Enterprise Provisioning Suite has far more functionality than just the excellent set of self-service features you would expect from a company founded upon password management. But implementing some of these more sophisticated provisioning features . . .

BMC Acquires Calendra

Technology Accelerates Evolution Of BMC's Provisioning Solution

by Jonathan Penn, February 24, 2005

With the purchase of Calendra, BMC Software receives several pieces of technology that are critical to the future success of its Control-SA provisioning solution. BMC will use Calendra's products to simplify the deployment and use of Control-SA, to expand . . .

How To Select A User Account Provisioning Product

by Jonathan Penn, September 30, 2004

Market interest in user account provisioning solutions remains strong because the solutions address several high-priority challenges organizations face, namely improving user productivity and operational efficiency, bolstering security, and providing . . .

HP Acquires TruLogica

Adaptive Management Expands To Identity

by Jonathan Penn, March 29, 2004

HP's acquisition of user provisioning vendor TruLogica is a logical next step after its acquisition of a Web single sign-on product, and fits nicely into its adaptive management strategy.

User Account Provisioning

Acquisitions, Convergence, And Integration Are Redefining The Landscape

by Jonathan Penn, March 8, 2004

Provisioning is a key component of identity management, which in turn is becoming a mainstream element of security architecture. As such, market interest in provisioning solutions is growing rapidly, attracting the attention of major IT vendors. Acquisitions . . .