It was a big-brain mixer last week at Ping’s Cloud Identity Summit (CIS). If you were a sponge, you went home soaking wet.
Integration, standards, services, security, identity, trust, implementation, cooperation, engineering.
Google, VeriSign, PayPal, Salesforce.com, Microsoft, SafeNet, Bitkoo, SecureAuth, Conformity, Ping, Intuit, Bechtel and other vendors and end-users all hit around those concepts and filled in some details.
Everyone who needs to play in the cloud identity game seemed to be in the rooms at the Keystone (Colo.) Conference Center for CIS.
Ping CEO Andre Durand started with the present, telling password proliferation that it was time to exit stage left. Google concurred. Microsoft’s keynote focused on the future and a unity message.
Microsoft technical fellow John Shewchuk highlighted the future with his federation demo, which included a relying party hosted on Amazon EC2, an R-STS running on Windows Azure, an identity provider on Google, and all accessed from Safari running on Windows 7.
While some of the standards needed to usher in this cloud identity era are here today, others focused on enterprise identity are still in various forms of development even though they are beginning to become widely known and understood from a needs perspective.
Technologies such as
SAML have been blazing the trail thus far. Burton Group in its May report “Market Profile: Identity Management 2010” calls out
XACML and SAML as the important standards for the coming years for federation and the cloud.
Chuck Mortimore, product management director for identity and security for Salesforce.com, characterized SAML during his presentation as “entering the early majority phase and is the standard for peer-to-peer federation.”
He said the current emerging standards better have one thing in common: be simple and easy to implement.
What’s working today, he said, includes SAML, static trust, and the OpenID/OAuth 2.0 hybrid. His list of what’s not working was topped by passwords.
So what drove the urgency for nearly 200 people to travel up to the Rocky Mountains for three days of cloud identity dissection? And why is it important for these discussions to be carried into this week’s Burton Group Catalyst conference and another Cloud Identity Summit next year (ED. – mark your calendars for July 2011)?
Gartner lays it out this way.
Global sales of software-as-a-service (SaaS) in the enterprise application segment will hit $8.5 billion this year. That represents a 14% increase over last year’s enterprise spending ($7.5 billion).
Gartner attributes that uptick to the enterprise’s growing approval of cloud computing. What they left off is the part about securing it, (and some compliance, auditing, etc.) another message that was on the marquee at CIS.
“IT managers are thinking strategically about cloud service deployments; more-progressive enterprises are thinking through what their IT operations will look like in a world of increasing cloud service leverage. This was highly unusual a year ago," Gartner said.
And while there is a lot more work to be done pulling the infrastructure together to secure cloud computing, the time to make the unusual usual seems to be shrinking. Gartner estimates that in the next five years, companies will spend a cumulative $112 billion on SaaS, platform as a service (PaaS), and infrastructure as a service (IaaS) collectively.
John Seely Brown, visiting scholar at the University of Southern California, grabbed the industry's collective brain stem last night to open Burton's Catalyst conference saying that the old inside/out IT architecture is evolving to outside/in and declared it the "new normal."
This week, the cloud identity focus will shift to Catalyst where the OpenID Foundation, the Information Card Foundation, the Open Identity Exchange, Kantara Initiative and Identity Commons will demonstrate enterprise uses of open identity as a business-enabler.
Ping will be in that mix with a host of others. Part of the work will showcase examples of using OpenID, Information Card, and SAML identities at different levels of assurance across multiple sites.
If you are in San Diego for the conference, try to duck your head in and take a look.
And don’t forget to check out other CIS wrap-ups from other conference participants:
Anil Saldhana, co-chair of the OASIS IDCloud Technical Committee, Active Directory expert
Sean Deuby, and software engineer
Travis Spencer,
If you have your own CIS wrap-up, post your URL in the comments section below.