Untitled Document
Change is hard. But you know what's even harder? When you know that change
is coming, but you have no idea what's going to happen -- or when. I talk to
customers in the identity space every day, and we're all wondering how the Oracle/Sun
acquisition will play out and what impact it will have on the enterprise directory
infrastructure. Will Oracle continue to invest in Sun Directory? What's going
to happen to the Sun identity management stack? And how will changes to the
product strategy and pricing model affect your business?
But as troubling as all this uncertainty might be, when I dive deeper into
these discussions, one thing becomes clear: the challenges around Sun/Oracle
are really another symptom of the same issues that have plagued our identity
and security infrastructures for some time.
Even before the Sun acquisition was announced, there was talk of the difficulties
of integrating LDAP with other data sources, about how we needed a more flexible
way to store and deliver identity. So the real question is not necessarily what
impact Sun's acquisition will have on product strategy or pricing, but how this
may trigger positive change in the way we deliver identity.
The directory challenge: building a flexible identity service in a heterogeneous,
highly distributed world
First, let's take a look at the situation we're facing in the world of directories.
Initially, directories seemed like the ideal way to externalize and regroup
identity from multiple application silos into a common storage. But this quickly
leads to a proliferation of different directories, each designed for different
business requirements.
Many of our customers fall into this common scenario: internal users and operations
are stored behind the firewall in Active Directory, while external users are
stored in a standard LDAP directory such as Sun/Netscape for externally-facing,
web-based applications.
With all these users scattered across different directory infrastructures,
as well as within specific application silos and databases, securing identities
and offering services such as portal single sign-on is a real challenge. Supporting
all these diverse constituencies is essential, but unifying different identity
infrastructures is difficult, which makes your whole directory infrastructure
more costly and less flexible. The need for "one view of the truth"
in the identity space is obvious, but it's an elusive goal for many enterprises.
-1-