Published:
August 03 2010, 04:13 PM
|
2 Comment(s)
by
Matthew Gardiner
CA Technologies recent announcement regarding identity and management (IAM) and the cloud has garnered the attention of the industry - and rightfully so. Our pragmatic approach to IAM for cloud computing reflects the needs and questions of our customers. Our approach is evolutionary for the large enterprises who want to use their on-premise IAM systems to support cloud adoption. It also offers a way for cloud providers to deliver enterprise-level (or better) security for their cloud services - something they need to do in order to exist. Finally, we know there is an entire market interested in using a service for IAM - and that's the revolutionary part of the approach.
Enterprises need to be able to evolve their existing IAM systems, deployed today almost exclusively on-premise, to incorporate cloud services - what we have referred to as extending IAM to the cloud. We are enabling companies to do this by enhancing CA Identity Manager to support various cloud applications, including newly announced support for Google Apps and existing support for salesforce.com's cloud platform, force.com, and cloud applications. These capabilities are an extension to a proven approach for the management of identities by enterprises. The integrations give organizations the ability to manage user entitlements to these SaaS applications and enforce existing governance policies as an integral part of their existing automated user entitlement management workflows. This is one step in our plan to expand our product functionality to help our customers more securely consume cloud services using their proven enterprise solutions.
Second, cloud providers themselves need to become "enterprise ready" from a management and security point of view. This was a topic of significant discussion by Gartner Analyst Dru Reeves at the recent Burton Catalyst conference in San Diego. To become enterprise-ready it's no surprise that cloud providers will need to control their own IAM systems and processes. We see this as IAM for the cloud. Cloud providers, like large enterprises, need to improve how their identities are managed, both for internal and external users. This was the point of the second part of our announcement last week - how CA is enabling cloud providers themselves (with MEDecision as a representative example) to automate IAM. To earn the trust of current and future enterprise cloud consumers, cloud providers will need rock-solid IAM systems of their own, that are also interoperable with those of the cloud consumers.
Finally, and a little more generally (one can only fit so much in a press-release), CA discussed ongoing activities, in conjunction with multiple partners, to provide identity services from the cloud (such as proofing, credential management, strong authentication, SSO, provisioning, etc.). This is certainly the more revolutionary part of what is going on in the industry and is a significant area of focus for CA. Stay tuned for more updates from CA and our partners, as this is a quickly evolving area of IAM and the cloud.
The enterprise-ready cloud will be a reality when enterprises can easily extend their existing IAM processes to the cloud, when cloud providers themselves use enterprise-grade and interoperable IAM systems for their cloud services, and finally when specialized cloud providers offer IAM services from the cloud.