Identity and Privacy
- Identity Management (IdM)
- IdM Infrastructure Governance,
Programs, and Practices
- Directory Services
- Privacy
- User Management and Provisioning
- Strong Authentication
- Simplified Sign-On
- Authorization and Access
Management
- Federated Identity
- Auditing the Identity Infrastructure
- Identity Theft
- Virtualization
- Identity Integration
- Identity Services
- User centric identity
Umbrella Technology Focus:
Identity Infrastructure Planning and building general-purpose infrastructure
for managing and applying identity information, and supporting the digital identity lifecycle
Primary Areas of Focus for 2008
-
IDENTITY MANAGEMENT (IdM):
Market coverage of how vendors, standards groups, and society are
transforming the way enterprises use identity information
FEDERATED IDENTITY:
Interoperability, deployment, and trust considerations for federating
identities across organizational and political boundaries; and standards,
products, and best practices for federating identity
-
USER MANAGEMENT AND PROVISIONING:
Life-cycle management of accounts and digital identities; delegated
and self-service identity administration; workflow; and provisioning
of accounts, access rights, and resources
STRONG AUTHENTICATION AND SINGLE SIGN-ON (SSO):
Deployment and management of technologies and approaches to strengthen identity
assurance; and approaches to simplify password management and reset, reduce the
number of logins, and leverage federated authentication services
-
AUTHORIZATION AND ACCESS MANAGEMENT:
Infrastructure for managing entitlements and authorizations; role
and rule-based access control tools and infrastructure; and
progress towards standard and portable expressions of access policies
PRIVACY:
Emerging tools and practices that enable compliance
with global privacy regulations; issues relating to
identity theft and phishing; and use and storage of
personal information in IT systems
-
DIRECTORY AND IDENTITY DATA SERVICES:
Providing applications and infrastructure with accurate identity
information; connecting to authoritative sources of identity
information; synchronizing account and identity information
across applications and directories; and scaling, federating,
and virtualizing identity repositories
-
IDENTITY AUDITING:
Keeping accurate record of identity related activity from
administration through run-time access to business resources;
reporting and attestation tools.
Additional Areas of Focus for 2008