Monday, November 19, 2007

Superuser

James McGovern had a comment on my re-cap of Ant Allan's session on privileged user management:

I wonder if Jackson Shaw will acknowledge that the real reason identity management vendors aren't solving for this problem is that they believe that this should be a separate and distinct product and their customers are too stupid to know better.

I'm not sure if that's the reason or not, James. I had a long discussion after the session with Ant Allan and I asked him why he thought more identity management vendors were not involved in this corner of the identity business. After all, none of the usual suspects have products in this area: Sun, Microsoft, Novell. His answer was quick and short: There's not enough services revenue required for these products.

I'm not sure how true that is but I will report back to you on that. Quest Software has OEMed PassGo's privilege management products so once we have some more experience with them I'd be happy to share further.

Technorati Tags:
, , ,

3 comments:

Gunnar said...

1) there is _plenty_ of potential services work to enable XACML in an enterprise.
http://1raindrop.typepad.com/1_raindrop/2007/11/authn-and-every.html

2) your blog lacks trackbacks

James McGovern said...

I just concluded that another reason for lack of XACML is that there aren't any good examples of converting an application. Just posted an example of how to do in Liferay 15 minutes ago...

Jackson Shaw said...

Gunnar - Unfortunately, Blogger doesn't support trackbacks - go figure. Thanks for reading and your comments.