Turning Identity Inside and Out: IAM Meets The Extended Enterprise

IAM Extended Enterprise

Company boundaries are blurring as businesses interact closely and utilize online services in growing numbers. Business ecosystems include different stakeholders including customers, partners, and subcontractors to owners and investors. Each stakeholder has their own business processes, infrastructure, and identities. As the number of external stakeholders grows, so, too, does the need to better manage these identities.

It is not enough today to know who is accessing your online services, but also in which role / capacity they enter, or who they represent.

Traditional identity management solutions, which concentrate on provisioning employee identities from the HR-system to the Active Directory, and providing Single Sign-On to internal applications, are ill-suited for this situation. New ways of thinking are required to improve convenience and loyalty towards customers, to deploy secure online services, to minimize the cost in customer acquisition and external identity management.

Internal vs External identities

The business drivers behind an Identity Management or Identity Relationship Management deployment — regulatory demands, desire to cut cost, improve security – differ when what’s at issue is internal vs external identities. This translates to different demands to the solutions companies need to select in order to satisfy the business objectives.

idenity-services

Productivity vs Convenience

A Single Sign-On deployment is likely required for both internal vs external facing use cases, but the driver might be different and skew the importance of the feature set that is required. Internally the wish is to increase productivity by enabling employees to login into company applications without repeated password entry. For external identities SSO brings convenience for the business customer as they can login from their corporate network to the online services with their own business IDs.

Compliance

Where the focus of internal identities is compliance with security policy, with external identities, compliance likely means adhering to local regulations where access to sensitive information may require the use of a credential which has a security level described by the local legislation / regulation (e.g. NIST or STORK).

Efficiency vs Customer Acquisition

Workflows such as inviting people to use a service or requesting access privileges with the tools the IAM provides can improve internal efficiency. But for external identities the driver is to facilitate customer acquisition process by enabling e.g. sales people to invite leads and customers to use the services directly from the CRM.

Audit vs Lead and Customer Tracking

Internal identities certainly need good audit trails, but for external identities the same audit trail has monetization potential – when it can help better target existing customers with upsell opportunities and converting leads into paying customers faster.

Standardization vs Openness

An internal corporate network gravitates towards standardization, whereas the external networks that a B2B service provider wants to connect will remain heterogeneous and diverse.

Centralized vs Distributed and Heterogeneous

Again the underlying technology would be the identity provider and much the same way as in standardization companies wish to centralize the access policies and decision points. Externally the identity provider also should support decision-making points within the customer organization which can permit access and let the customers manage their own privileges. This means that even though internally the company might select a single standard or process to follow, for external connected identities and networks, they need to embrace diverse options.

Internal Control vs Outsourced & Tiered Management

Employees and their access credentials as well as authorization should be controlled internally. Externally it makes much more sense to let the customer organization attach (authorize) access privileges to their employees. This would save a lot of effort for the company offering the online service to external companies i.e. customers.

Ownership vs Trust

 

Companies want to own their employee identities at least to some extent. The concept of Bring Your Own ID (BYOID) might change this slightly, yet the company would want to retain control over access privileges (roles, authorizations). For external identities, at issue is defining trust – since the online service provider should be able to trust the identities coming from the customer domain, and trust that their access privileges are properly maintained within the customer organization.

Organizations have a tremendous opportunity to enable new business models with significant impact on the bottom line – and that includes all kinds of organizations, from service provider, manufacturer, utility company, retailer, financial or healthcare institute, or even the Government. As more interactions and assets move online, providing the right identity and lifecycle management services will become fundamental to creating new business paradigms and ensuring trust.

By Petteri Ihalainen

Future Image Cloudtweaks Compressor

Artificial Intelligence Communism

Artificial Intelligence Communism Our technological innovation and progress (especially in the digital space) continues to accelerate unbounded. Google has recently announced there ascension to “quantum supremacy” with the unveiling of it’s brand new Sycamore chip ...
Ronald van Loon

The Future of Work: Confronting One of the Biggest Challenges of the Next Decade

The Future of Work Technologies like artificial intelligence (AI), machine learning (ML), and automation in all of its forms can augment human workers and enable them to pivot to more valuable work, and perform their ...
Gartner Predicts Public Cloud Services Market Will Reach $397.4B by 2022

Gartner Predicts Public Cloud Services Market Will Reach $397.4B by 2022

Public Cloud Services Market Will Reach $397.4B Worldwide end-user spending on public cloud services is forecast to grow 23.1% in 2021 to total $332.3 billion, up from $270 billion in 2020. Garter predicts worldwide end-user ...
Eddie Segal

Kubernetes on AWS: Tips for Cloud-Native Development

Kubernetes AWS Tips Kubernetes is a container orchestration and management tool that automates container deployment. Kubernetes is mainly used in the cloud. A recent survey by CNCF showed that 83% of organizations deploy Kubernetes on ...
Gary Taylor

6 Organizational Challenges for Cloud Services

Cloud Service Challenges Organizations have rapidly come to the realization that digital cloud services make a compelling business case for helping them navigate this difficult pandemic year. The market for cloud services is expected to ...

PROXY SERVICES

The CloudTweaks technology lists will include updated resources to leading services from around the globe. Examples include leading IT Monitoring Services, Bootcamps, VPNs, CDNs, Reseller Programs and much more...

  • Smartproxy

    Smartproxy

    Smartproxy is a rising star in the constantly growing proxy market. Smartproxy offers awarded customer service, impressive performance, and is serious about your anonymity (yes, cybersecurity matters). The latest features developed by Smartproxy are 30 minute long sticky sessions and Google Proxies. Rumor has it, the latter guarantee 100% success rate

  • Bright Data

    Bright Data

    Bright Data’s network is one of the most robust of its kind globally. Here are its stark advantages: Extremely stable connection for long sessions (99.99% uptime guaranteed). Free to integrate with our Proxy Manager which allows you to define custom rules for optimized results. Send unlimited concurrent requests increasing speed, cost-effectiveness, and overall efficiency.

  • Rsocks

    Rsocks

    RSocks team offers a huge amount of residential plans which were developed for plenty of tasks and, most importantly, has been proved to be quite efficient. Such variety has been created on purpose to let everyone choose a plan for a reasonable price, online, rotation and other parameters.

  • Storm Proxies

    Storm Proxies

    Storm Proxies' network is optimized for high performance and fast multi-threaded tools. You get unlimited bandwidth. No hidden costs, no limits on bandwidth. Try Storm Proxies 100% Risk Free. If you are not happy with the service email us within 24 hours of purchase and we will refund you.