IDC MarketScape: Worldwide Federated Identity Management and Single Sign-On 2014 Vendor Assessment

Transcription

1 IDC MARKETSCAPE IDC MarketScape: Worldwide Federated Identity Management and Single Sign-On 2014 Vendor Assessment Sally Hudson Terry Frazier This IDC MarketScape Excerpt features: Covisint IDC MARKETSCAPE FIGURE FIGURE 1 IDC MarketScape Worldwide Federated Identity Management and Single Sign-On Vendor Assessment Source: IDC, 2014 March 2014, IDC #247097e

2 Please see the Appendix for detailed methodology, market definition, and scoring criteria. IN THIS EXCERPT The content for this excerpt was taken directly from IDC MarketScape Worldwide Federated Identity Management and Single Sign-On Vendor Assessment (Doc # ). All or parts of the following sections are included in this excerpt: IDC Opinion, IDC MarketScape Vendor Inclusion Criteria, Essential Guidance, Vendor Summary Profile, Appendix and Learn More. Also included is Figure 1. IDC OPINION This IDC study assesses 13 different vendors offering products and services in the federated identity management (FIM) single sign-on (SSO) market. This market falls within the overall worldwide identity and access management (IAM) market as defined in IDC's Software Taxonomy, 2013 (IDC #241527, June 2013). Vendor selection for this study included vendors with existing and vendors developing federated single sign-on (FSSO) programs. This assessment discusses both quantitative and qualitative characteristics that explain success in this important market. The IAM market is significant, particularly in the developed enterprise markets. In those markets where penetration is relatively high, it is becoming increasingly important to cloud services and security across companies of all sizes and industries. IAM vendors, and FSSO vendors in particular, have the opportunity to increase differentiation and create new annuity streams by developing services portfolios that impel enterprise customers to higher levels of risk management and security, resulting in greater benefits for customers, partners, and the respective industries overall. In addition, vendors can continue to expand both core and advanced services into the midmarket and into emerging markets with this IAM technology. Additional strategy success factors identified from this study include: A holistic and integrated approach to FSSO delivery, including both SaaS and on-premise offerings that securely extend all services to remote, home, satellite, and branch workers, and enabling access to applications services from mobile devices The ability to leverage new technologies such as the cloud, mobility, Big Data, and social media to develop new identity-aware solutions and flexible, secure business models and incorporate LOB managers into the identity life cycle Development of unique, ease-of use, and customizable capabilities around both horizontal and industry-specific opportunities Extension of FSSO capabilities to third parties and ISPs, especially in the cloud, including training, business development, and marketing support in addition to developing a products and services portfolio Continued expansion into emerging markets such as Eastern Europe, Asia/Pacific, and Latin America, where lack of existing infrastructure often makes implementation and deployment easier for both vendor and customer A focus on consistent operational excellence, which includes consistent delivery of services and capabilities at regional and global levels and through both direct and indirect distribution channels 2014 IDC #

3 IDC MARKETSCAPE VENDOR INCLUSION CRITERIA This IDC MarketScape includes all market Leaders, Major Players, as well as Contenders in the FSSO market. Requirements for inclusion in this IDC study include the following: Willingness to participate in a vendor briefing and answering a specific and standardized set of questions including (but not limited to) company size, number of customers, current product, product capabilities, road map strategy, R&D investments, geographic distribution, and go-tomarket strategies The ability to provide at least two customer references willing to be interviewed by IDC as to the product capabilities and vendor relationship in this market (To qualify, customers must have the product in full deployment. This was used in addition to existing IDC demand-side research in the FSSO market.) Willingness to provide a full-featured demo for the IDC research staff (see Appendix) ESSENTIAL BUYER GUIDANCE From a technology standpoint, IDC sees successful cloud identity offerings as providing a federated, standards-based approach based on SSO complemented by transparent, risk-based multifactor authentication backstopped by antifraud. As the Internet of Things ties to datacenter security, cloud identity, analytics, and privacy regulations, FSSO becomes a necessary and fundamental enabling technology. When considering FSSO, particularly for SaaS and the cloud, organizations and IT professionals should consider a strategy that adequately addresses the following questions: What is the total cost of my existing identity infrastructure? What options are available from SaaS/cloud providers to improve services from my identity operation and/or to better integrate external and internal identity infrastructures? How much of my existing identity infrastructure do I wish to reuse when considering SaaS/cloud services? What service-level requirements will my user population demand? Can I ensure service requirements are complied with on an ongoing basis? What are the longer-term costs associated with outsourcing identity to the cloud? When looking for an FSSO solution, organizations should look for companies that: Provide standards-based software Have solid partnerships with enterprise providers Have sustained credibility and provide quality of service Can clearly and completely describe service roles and responsibilities 2014 IDC #

4 VENDOR SUMMARY PROFILES This section briefly explains IDC's key observations resulting in a vendor's position in the IDC MarketScape. While every vendor is evaluated against each of the criteria outlined in the Appendix, the description here provides a summary of each vendor's strengths and opportunities. Covisint Overview Covisint, founded in 2000, was established by a consortium of organizations General Motors, Ford, DaimlerChrysler, and others and was acquired in 2004 by Compuware Corp. Since the acquisition, Covisint has extended its cloud engagement platform into additional industries including healthcare, energy, travel, and the public sector ( Covisint, headquartered in Detroit, Michigan, now has over 500 employees, and it grew more than 23% year over year in its fiscal 2013 to achieve in excess of $90 million in revenue. The company has more than 3,000 active customers and more than 18 million identities under management. Covisint is a Major Player in this IDC MarketScape. Product Covisint Cloud Identity Services v 3.12 provides enterprise-strength SSO for cloud-based applications. Customer Perspective IDC interviewed companies requiring secure B2B access to enterprise applications, including SharePoint. Covisint received high marks for deployment and planning support, innovation, and costeffectiveness. According to customers, Covisint's flexible pricing model was unique among competitors and a distinct advantage in B2B scenarios with high volumes of temporary users: "One of the things that Covisint had was a 'per authentication' model where we were able to pay per use rather than per user. It was a significant cost advantage for our type of use." In addition, Covisint was noted for its support of challenging, innovative projects: "Covisint gave us their best engineers, so we were all locked in a room trying to figure out this problem. It was extremely challenging because what we drew out on paper did not prove itself out in the lab. I'm still positive about that experience because we found a way to do it." Strengths Since its inception in 2000, Covisint has offered a 100% cloud-based solution with a proven track record and sees itself ahead of its main competitors in terms of enterprise-grade deployment expertise and scale. IDC believes that based on the company's track record in both cloud-based delivery models and federated identities, Covisint is in a strong position to continue to grow market share in larger organizations. Covisint has grown well beyond its roots in the automotive industry, with an increasing 2014 IDC #

5 presence in the healthcare industry, as well as expanding across core global enterprises in various markets. Challenges Covisint faces challenges from entrenched IAM vendors CA Technologies, IBM, and Oracle. The company also competes with RSA, the Security Division of EMC. Historically, Covisint, as part of Compuware, did not have the brand recognition and market penetration of the traditional IAM market leaders, and the company was primarily known in the automotive industry for its FSSO services-based software. APPENDIX Reading an IDC MarketScape Graph For the purposes of this analysis, IDC divided potential key measures for success into two primary categories: capabilities and strategies. Positioning on the y-axis reflects the vendor's current capabilities and menu of services and how well aligned the vendor is to customer needs. The capabilities category focuses on the capabilities of the company and product today, here and now. Under this category, IDC analysts will look at how well a vendor is building/delivering capabilities that enable it to execute its chosen strategy in the market. Positioning on the x-axis or strategies axis indicates how well the vendor's future strategy aligns with what customers will require in three to five years. The strategies category focuses on high-level decisions and underlying assumptions about offerings, customer segments, and business and go-tomarket plans for the next three to five years. The size of the individual vendor markers in the IDC MarketScape represent the market share of each individual vendor within the specific market segment being assessed. Positioning on the grid is broken down into various groupings that reflect the combined view of a vendor with respect to both strategies (x-axis) and capabilities (y-axis). The groupings are defined as follows: Leaders are companies that have led and continue to lead the market in both breadth of offering and strategic intent. These companies have made the investments in service portfolios, go-to-market enablement, and delivery capabilities that set them apart from other vendors. Major Players are companies that have established and proven offerings in the market and have demonstrable success in delivering and delighting customers. These companies are "shadowing" the Leaders and exert competitive pressures via new capabilities, channel initiatives, and other differentiable capabilities that raise the bar for all vendors in the market. Contenders are companies that have defined FSSO capabilities but have delivery resources, technology infrastructures, and go-to-market coverage that are still being developed IDC #

6 Participants are companies that are in the process of developing an FSSO solution or have initiated limited releases. Based upon the final scores (on the x-axis and the y-axis), we make the following high-level observations about the various players (see the Vendor Summary Profiles section for more detailed vendor analysis): Leaders in the federated identity and SSO IDC MarketScape assessment have scored the highest among all players in the strategies and capabilities categories. All have robust portfolios and well-defined go-to-market strategies targeting growth globally, across company size, and through both direct and indirect distribution channels. Several vendors are Major Players. As Major Players, they have demonstrated in-depth knowledge of the market, the trends impacting the market, and how to leverage those trends for sustained growth. Vendors ranked as Contenders have programs that effectively address some, but not all, of the key trends and success factors at play in the market. IDC MarketScape Methodology IDC MarketScape criteria selection, weightings, and vendor scores represent well-researched IDC judgment about the market and specific vendors. IDC analysts tailor the range of standard characteristics by which vendors are measured through structured discussions, surveys, and interviews with market leaders, participants, and end users. Market weightings are based on user interviews, buyer surveys, and the input of a review board of IDC experts in each market. IDC analysts base individual vendor scores, and ultimately vendor positions, on the IDC MarketScape, on detailed surveys and interviews with the vendors, publicly available information, and end-user experiences in an effort to provide an accurate and consistent assessment of each vendor's characteristics, behavior, and capability. The evaluation process involves several steps, including the following: Business briefings are conducted with each vendor to learn about each group's growth, sales, marketing, customer service, and offering strategies as well as background information about business performance, offering differentiators, and key market trends. The briefings are initiated with a request to deliver the briefing based on a standard set of questions. The briefings are used to score the strategy sections of the IDC MarketScape. Reference interviews with two customers from each participating vendor gauge the customers' experience working with the vendor and the overall complexity of the project. Customer reference interviews are built around a standard set of questions. Analysts are trained and encouraged to probe for further details as warranted during the reference interviews. Customer reference interviews are used to score different elements of the capabilities section of the IDC MarketScape. Customer information is also derived from many interviews, Webinars, and events focused on IAM technologies throughout the year. A demo is presented by each vendor based on a distributed and uniform set of questions and criteria. The purpose of the demo is to assess the creativity and technical capabilities offered by the vendor in both basic and advanced scenarios across the spectrum of categories that make up an offering or portfolio of related capabilities in FIM. Vendors are encouraged to show 2014 IDC #

7 key differentiators if their area of specialization in a particular category is underrepresented in the demo guide scenario. The demo is used to score the offering capabilities section of the IDC MarketScape. Each IDC MarketScape is centered on vendor offerings. Organizing each offering into the appropriate IDC MarketScape is based on features shown during the demo, supplemented with an optional survey. This assessment includes both features from the demo guide and differentiating features shown as part of an extended demo. In addition, feedback from customer and partner references is used as supplemental validation. For this study, the vendor demos centered on the common criteria: Ease of installation Ease of configuration: Was integration with AD a straightforward process? What other systems of record are supported? Quality of the user interface: Ease of navigation Ease of customization After installation is completed: How easy is it to add user accounts? Delete user accounts? What standards are supported? Please list all (i.e., SAML, WS, OAuth, OpenID Connect, other). Does it provide/support RESTful interfaces? (APIs) Does the software accommodate two-factor or out-of-band (OOB) authentication? Which third-party authentication mechanisms are supported? Can the user's mobile device be configured to act as a one-time password (OTP) token? Is there logging and audit trail capability? Is there reporting? Is it automated? Is it customizable? What about password management? Where are passwords stored? Does it integrate with and support third-party password management? Does it enforce strong passwords? What is provided out of the box? Scale: How many applications are supported? (Number of connectors) 2014 IDC #

8 Maximum number of users? Quality of vendor support: Availability and time to response Quality of answers Willingness to escalate internally if necessary for resolution Documentation Is it clear? Complete? Market Definition This study is IDC's assessment of the worldwide FSSO market using the IDC MarketScape model. Federated SSO (FSSO) is a submarket of the overall worldwide IAM market. The IDC software taxonomy defines the identity and access management (IAM) market as a comprehensive set of solutions used to identify users in a system (employees, customers, contractors, etc.) and control their access to resources within that system by associating user rights and restrictions with the established identity. Subcategories of the IAM market include Web single sign-on (WSSO) and federated single sign-on (FSSO); host/enterprise single sign-on (ESSO); personal portable security devices (PPSDs); user provisioning, including roles-based access control, privileged identity management, and fine-grained entitlements; advanced authentication; legacy authorization; and software licensing authentication tokens (SLATs). IDC's security software taxonomy has expanded to include multilayered authentication. This is a competitive market. While it usually includes traditional PPSD and advanced authentication software solutions as outlined in the taxonomy, other elements of this include fraud detection and risk analysis software on the back-end server. Federated single sign-on is the ability to provide a standards-based approach (i.e., SAML, WS, Shibboleth) to trust identities across organizations, partners, and other third parties. This is essential to meeting security needs and also many U.S. and international government and industry-specific compliance regulations. Federated identity management (FIM) software provides the capabilities to accomplish this goal as well as the ability for organizations to limit the sharing of identity and attributes as dictated by fluctuating business processes IDC #

9 About IDC International Data Corporation (IDC) is the premier global provider of market intelligence, advisory services, and events for the information technology, telecommunications and consumer technology markets. IDC helps IT professionals, business executives, and the investment community make factbased decisions on technology purchases and business strategy. More than 1000 IDC analysts provide global, regional, and local expertise on technology and industry opportunities and trends in over 110 countries worldwide. For more than 48 years, IDC has provided strategic insights to help our clients achieve their key business objectives. IDC is a subsidiary of IDG, the world's leading technology media, research, and events company. Global Headquarters 5 Speen Street Framingham, MA USA idc-insights-community.com Copyright Notice This IDC research document was published as part of an IDC continuous intelligence service, providing written research, analyst interactions, telebriefings, and conferences. Visit to learn more about IDC subscription and consulting services. To view a list of IDC offices worldwide, visit Please contact the IDC Hotline at , ext (or ) or sales@idc.com for information on applying the price of this document toward the purchase of an IDC service or for information on additional copies or Web rights. Copyright 2014 IDC. Reproduction is forbidden unless authorized. All rights reserved.