tag:blogger.com,1999:blog-21995415.post4565291889664497784..comments2024-02-01T11:08:01.659-05:00Comments on Matt Flynn: Information Security | Identity & Access Mgmt.: Next Generation IDaaS: Moving From Tactical to StrategicMatt Flynnhttp://www.blogger.com/profile/09902381553517250020noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-21995415.post-29242850433597920992016-05-18T15:17:54.728-04:002016-05-18T15:17:54.728-04:00Hi Amar,
Thanks for the questions. First, I stat...Hi Amar, <br /><br />Thanks for the questions. First, I stated early in the post that I was primarily talking about enterprise IAM requirements rather than consumer scenarios. But, since you asked about customer or consumer IAM, here's what I'd say:<br /><br />I don't think the distinction between enterprise and consumer matters as much as some vendors want you to think. My point was that the types of rules we put in place have traditionally been more obstructive in nature. We were trying to prevent people from accessing sensitive things. The on-going shift to Digital Business includes a shift in IAM to be more open. Grant first, but with controls in place. Perform security checks without the user noticing. Force strong authentication only when necessary. And these requirements may apply in both enterprise and consumer scenarios, depending on the organization's requirements.Matt Flynnhttps://www.blogger.com/profile/09902381553517250020noreply@blogger.comtag:blogger.com,1999:blog-21995415.post-48997921810675860352016-05-06T09:58:34.798-04:002016-05-06T09:58:34.798-04:00Very insightful post on the evolution of Identity ...Very insightful post on the evolution of Identity and Access Management systems. You pointed out that the basic role of IAM is shifting from "one of defense-and-control to one of enablement." But isn't enablement the mandate of an IAM system that is external users, or what is now called Customer IAM. Wouldn't this mean that there is a sort of convergence between traditional IAM and Customer IAM? Or is it just that traditional IAM is becoming more user friendly due to organizational and employee pressures?Anonymoushttps://www.blogger.com/profile/04255941860246708660noreply@blogger.com