I woke up about 2,000 miles away from La Jolla and the Cloud Identity Summit in my Chicagoland home wondering, "now what"? The week was great and we heard a lot of amazing talks from visionaries and leaders in the identity space, but what's next? My guess is many of you are asking the same question. Here are a few of the main thoughts I took away from CIS that everyone should be socializing within their organization to better for success.
1. "You're not in Kansas anymore." Embrace your standing in the new age of information security - long gone are the days of just carrying about a bunch of hard tokens, deploying Verisign certificates, and lock servers down behind a firewall. Today you need to deal with everything from corporate issued hardware to the latest Apple gadget one of your executives picked up over the weekend.
2. Your local office serves up latte's and free Wifi. Your users are everywhere. Your people are working from a coffee shop with free wifi. It's no longer about keeping people out - it is about enabling and empowering people to access the data and applications they need anywhere and at any time.
3. It's not just a browser thing. The identities you are managing span everywhere from your custom mobile apps to the APIs you expose. Your strategy needs to embrace cloud, mobile and IoT and not create new silos.
4. Don't use a sledgehammer when you need a screwdriver. You need the right tool for the job and you can't try to adapt a tool to meet your needs. The best tools are those that are based on standards. You wouldn't try to drive a screw in with a sledgehammer, and you shouldn't try to adapt your legacy identity tools to solve today's identity needs. You need to take a standards based approach to meet your needs.
5. You're not going to find one throat to choke so stop trying. The days of buying all your solutions from a single vendor has gone the way of the all beige PC. Your identity solution will be made up of best of breed tools from multiple vendors. The key is making sure you choose the right ones and that they play well with each other.
6. Finally - don't get comfortable, change is inevitable. Yester-years tools are not fit to solve today's and your future identity security challenges. Embrace what is coming and start working on your strategy to address it today and pretty much every day going forward.