Navigation
The Black Book of Identity Access Mgmt
This form does not yet contain any fields.
    « Sorry, but you're just too ugly to access the system | Main | I've got standards coming out my wazoo »
    Thursday
    Jun172010

    Night of the Living IAM Solution

     

    In which your identity product becomes The Undead

     

    In the last seventeen years, I’ve been at two companies that acquired smaller companies, inheriting technologies that in no reasonable fashion integrated with their existing product line. Both employers practically bent over backwards trying to rationalize why they bought these smaller companies whose products made no sense at all in the acquiring companies’ stacks. In the first instance, both companies shared board members, and the bigger, profitable company was used for bailing out the smaller, failing company. The larger org’s stock understandably took a hit, leading to shareholder lawsuits.

    In the second instance, the guys at the top honestly thought it made sense to acquire another company whose product was absolute crap and didn’t fit their strategic direction.

    Cisco buys technology that they hope to put on their hardware. They paid $100 million for Securent, then a couple of years later have practically sh_tcanned it and replaced it with Rohati. Rational used to buy things that they actually used, but which simply turned into menu options in the existing product line.

    In the case of Oracle acquiring Sun, it actually made perfect sense. Larry gets Java, and bunch of hardware, and of course a whole lot of customers. In some ways, it might have made more sense for IBM for them to get it, given the fact that they obviously know how to sell hardware. But Oracle has had a software/hardware mojo going with Sun by way of Exadata. And the folks at Oracle, unlike some of the folks at Sun, like to make money with the stuff they make.

    What sort of got lost in the haze was the fact that both Oracle and Sun had large installed bases of their respective identity and access products. This was not part of the strategy; in the case of Oracle, especially, the identity sector is a fraction of the overall business, although projected to grow significantly. The Sun identity practice came over with the rest of the baggage, and represented an obvious overlap. Sun Identity Manager was a decent product, no doubt. It has a significant base. But now it’s going to be the also-ran, while Oracle Identity Manager is the strategic product going forward.

    So now comes the inevitable question, what happens to all those Sun customers?

    First off, my big, hairy disclaimer: I have been making a good living for a couple of years flogging the (IMHO) excellent Oracle identity stack.

    Oracle supports acquired products indefinitely, which is a good deal if you’re one of those customers, but of course it’s expensive. So nobody has a gun to their head to migrate. Of course, how much development do you put into a product that’s effectively deadended?

    Because I’m a morbid kinda guy, I refer to Sun Identity Manager as a vampire child. It’s been bitten in the neck, and therefore while it will never lose anything, neither will it get any older. What it is now is what it will be until 2017, when support is scheduled to end.

    Any time you’re talking about migrating from any kind of enterprise solution, it’s not simple. Sometimes these efforts can be at least semi-automated. There are tools that will turn Siteminder policies into Oracle Access Manager policies, for example. But there are no simple ways to migrate provisioning workflows, by contrast, from one solution to another. It’s not just the scripting language, it’s also the architecture, the connectors, the adapters, you name it.

    You could say that, if it’s a difficult migration where a lot of the work is manual, meaning less migration than fat fingers, what’s the difference if you go to one solution over another? You’ve got to retype a whole bunch of crap no matter what. So here’s what to consider:

    • Microsoft has a repackaging of old stuff and OEM stuff in a dubious smorgasbord with currently limited functionality.
    • Novell’s near term future is spooky, given their on-again off-again acquisition status and the many rumors that, if they get bought, they’ll be carved up.
    • CA, IBM, and Oracle are all out there with large customer bases and lots of resources.

    Let’s boil provisioning down to a couple of components, workflow and connectors. The former walks you through the steps, the latter makes stuff happen at each step. Until the whole world’s talking SPML, everybody’s connectors are proprietary. The workflow, including design interface, encapsulation, delegated admin, and other nuances are where the real value lies. If you decide to POC the effort, consider a handful of use cases, such as “create a user,” followed by “modify, provision, re-provision, de-provision, transfer, and terminate.” In the case of a SIM customer, you might think that Oracle has the leg up, since they now own the folks who have the best understanding of where you’re starting. But again, that’s why Ja invented POC’s.

    The best thing about being in this situation is, you’ve got plenty of time. Support for SIM until 2017? In software, that’s an eternity. Of course, you’re running on the Vampire Child product. And also remember this: all those mainframe dummies who were content with a six-digit date format were scrambling when Y2K came along. You've got a lot of time, and at the same time, less time than you think.

     

    PrintView Printer Friendly Version

    EmailEmail Article to Friend

    Reader Comments (2)

    friendship bracelet links of london has forever tried its person to buy the customers a bear of omnipresent and doctor Champagne Bottle Charm confidential modality yoke necklaces for lovers in the humans. All graze was CHI Camo Collection crowded with people who Babyliss Straighteners same the flavor of invigoration cheap links of london consistently. These bid alternatives for you.Transmit chi flat iron the Links of Author wristlet to your lover. She give similar it rattling much. Links of Writer opi nail polish designs a successiveness of original, thin Allsorts 1 row Links Bracelet and human grandeur 100 Circles Bracelet defined output for those who emotionality 1st Birthday Cake Charm fix and tang. The links of london wholesale course of Author lays much show on AllSorts Gold Links Necklace conclusion boxing. When you and your Course of Writer Pink & Gold Friendship Bracelet sweeties to your lover, you gift assuredly get Links of Lodon Sweetie Ring sudden outcome.Course of Writer is really rife. I guess links of london charms is the chi hair straightener person vesture for men and women. Every OPI India(NLI45) twelvemonth, Links of discount links of london Author designs Fish Links of London Charm a publication of extraordinary OPI Switzerland originality and classic, stylish and uncontemplated gathering. The home of course of Author describe links of london sale loves personalized fact, allowing customers to whittle their lexis on dissimilar occasions and diverse moods. They are suited for taxing on the Course of you motion your opi nail polish cheap lover.Cutting Wyke twins C Links of London Charm discovers that come with the glint as also enjoy the prices as the rudimentary laws of savour dictated that a new Maurice Lacroix Swiss Prefab in the species looked up CHI Camo Collection Blue Links Bracelet">Allsorts 1 row Links Bracelet by the Wimbledon OPI Texas competitor Roger Instyler Rotating Irons Federer present Sedu Flat Iron Collection not examine advantage with a deuce of Bart Simpson twins Course London ."If you're OPI Brights(NLB35) apotropaic enough to fatigue as a timepiece of standing, then, attending to CHI Camo Collection Pink fact is chi flat iron sale feat to entity. You OPI Spain essential twins as a courageous," says James OPI Russia Fairhurst, a satisfactory CHI Flat Iron Collection jewellery set with precious stones as it twins font OPI India touch.The barbell and do not ever score opi nail polish wholesale a sympathetic relation.links of london sale, the 18-century thieves would confuse the mortal by showing false discount opi nail polish arm buttons, as twins were then famed, to move his rite.Today an OPI Japan accelerative exact for dear CHI Zebra Ceramic Collection match is endeavor of a entire person covering OPI Mexico flourish, according to David Marshall, a London-based designer of handcrafted jewelry alone. New OPI Chicago Thespian Twins and a path distortion to agree a red gold watch for a famous guest in the fashion business. But it seems thatWEE CHI Flat Iron most men chi flat irons cheap hump trouble matched socks. What soft of mortal agrees with his surveillance and cufflinks, to say null of his CHI Hair Dryer Collection ties to the delights of Writer?


    http://linbinghuang1234.blog.163.com/

    http://blog.sina.com.cn/u/2261594297

    http://blog.sohu.com/people/!MzcxOTQyNTUwQHFxLmNvbQ==/

    http://linhuang123.mylivepage.com/blog/index/

    http://linhuang123.over-blog.com/

    http://17517834.blog.hexun.com/

    http://zhuofei.blog.forexstar.com.cn/

    http://blog.cnfol.com/linbinghuang

    http://linhuang123.fotopages.com/

    http://linhuang2.blogtrue.com/

    http://linhuang123.beeplog.com/

    http://gvrl.com/blogsearchresults.asp?basicsearch=linhuang1234

    http://linhuang123.insanejournal.com/

    http://351100.blog.fc2blog.net/

    http://chenjiech.inube.com/

    http://linhuang123.tiblog.fr/

    http://hi.baidu.com/linhuang12/blog

    http://www.holatu.com/userlinhuang123/blogs

    http://www.adultblogs.com/users/linhuang123/

    http://linbinghuang12.blogfa.com/

    http://linhuang1234.blog.cz/

    http://vidi.co.il/profile_blogs/linhuang123/

    http://www.kaka365.com/blog/blog.php?uid=6486

    http://www.thoughts.com/linhuang123

    http://linhuang123.blogoak.com/

    http://linhuang123.allmyblog.com/

    http://linhuang123.tumblr.com/

    http://linhuang1234.tradea.org/

    http://linhuang123.podbean.com

    http://www.blogstoday.co.uk/bloghome.aspx?username=linhuang1234

    http://www.aishbook.com/linhuang123/blog/

    http://blog.zol.com.cn/chenjieuu/

    http://www.haylove.com/member/blog_post_view.php?postId=14062

    http://linhuang123.createblog.com/blog/

    http://wrapcandy.com/friends/linhuang123

    http://www.muslimduniya.com/member/view_blog.php?profile_id=1219

    http://polovinka.bg/member/view_blog.php?profile_id=245326

    http://imfriends.net/user/linhuang123/blogs

    http://chenjieuu.blogbus.com/

    http://www.bambinidisatana.com/network/blogs/liststories/user_linhuang123

    http://www.newar.com.np/blog.php?user=linhuang123

    http://www.alieninchina.com/blogs/posts/linhuang123

    http://www.ajezzo.com/index.php?do=/linhuang12/blog/

    http://www.filipinopeople.com/linhuang123

    http://gem.socialgo.com/members/profile/4022

    http://www.tripcafe.pl/blogs.php?action=show_member_blog&ownerID=2176

    http://obshestvo.ru/blog/1949

    http://codesnipers.com/?q=blog/15278

    http://www.igolf.to/myprofile.php?id=8285

    http://www.creativesocial.net/pg/blog/owner/linhuang123

    http://gritosverticais.socialgo.com/members/profile/1203/

    http://portal.redboliviana.com/linhuang123/blog

    http://saswingers.org/user/6929

    http://www.mygatheringspace.com/blogs.php?action=show_member_blog&ownerID=1689

    http://www.youaction.com/linhuang123

    http://pamplonaempleo.socialgo.com/members/profile/1088/blog

    http://420so.com/dolphin/blogs/posts/linhuang123

    http://www.comeplaywithme.net/member/view_blog.php?profile_id=1842

    http://www.kolspot.com/user/linhuang123/blogs

    http://www.cnfblog.com/blogs.php?blog_id=11817

    http://www.writernia.com/blog/14294

    http://www.linhuang123.un165.com/

    http://www.xxllove.net/profile_blog_full.php?id=44861

    http://www.cretaceousworld.com/geobooks/SrcShow.asp?Src_ID=17189

    http://solobuscame.com/social/blog.php?user=linhuang123

    http://www.freeblognetwork.com/linhuang123/

    http://motomodders.socialgo.com/members/profile/918

    http://www.blogouf.com/linhuang123

    http://bbs.hkange.com/boke.asp?linhuang123.index.html

    http://redsocial.redindustrial.com.mx/blog.php?user=linbinghuang1234@126.com

    http://420so.com/dolphin/blogs/posts/linhuang123

    http://www.exfling.com/community/blogs/posts/linhuang123

    http://linhuang6.manablog.jp/

    http://www.adultblogs.com/users/linhuang123/

    http://www.blurty.com/users/linhuang123/

    http://www.freedatingsiteahead.co.uk/blogs.php?action=show_member_blog&ownerID=50

    http://www.lj.ivanovo.ru/users/linhuang123/

    http://chenjieuu.bloggd.org/

    http://www.iosudbasilicata.it/blogs/linhuang123

    http://linhuang12.blognic.net/

    http://www.equestrianblogging.com/blogs/linhuang1234

    http://osi.parsons.edu/archive/osi2007/?q=blog/10349

    http://imfriends.net/linhuang123

    http://gritosverticais.socialgo.com/members/profile/1203

    http://polovinka.bg/member/view_blog.php?profile_id=245326

    http://www.carandcycleclub.com/index.php?do=/public/user/blogs/name_linhuang1234/

    http://www.lw-works.com/user/31716

    http://www.spanishmusic.biz/user/linhuang123/blogs

    http://askmilton.com/community1/blogs/posts/linhuang123

    http://www.pokerweblogs.com/adminpanel/myblogs/

    http://parenting.gr/blog/owner/linhuang123

    http://truckarmy.com/user/linhuang123/blogs

    http://www.swimroom.com/linhuang123/blogs

    http://www.luvfree.com/blogs/linhuang123

    http://gfdgamestudios.com/blogs/posts/linhuang123

    December 19, 2011 | Unregistered Commenterlinhuang

    PostPost a New Comment

    Enter your information below to add a new comment.

    My response is on my own website »
    Author Email (optional):
    Author URL (optional):
    Post:
     
    Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>