Market Trends in 2002 and 2003

Transcription

1 Markets, J. Pescatore, R. Wagner Research Note 8 January 2003 Extranet Access Management 2H02 Magic Quadrant Inside-the-firewall (intraenterprise) integration to reduce costs dominated the extranet access management market in Enterprises and vendors will focus on Active Directory in Core Topic Security and Privacy: Security Tools, Technologies and Tactics Key Issues Which product approaches and practices will help enterprises achieve higher levels of data integrity? How will network-based applications become safe for mission-critical businesses during the next five years? Strategic Planning Assumption Through 2H04, 70 percent of extranet access management deployments will be tied to reducing operational costs, which will place a premium on pre-integrated solutions, short payback periods and lower per-seat costs (0.7 probability). Market Trends in 2002 and 2003 Uncertain economic conditions and a vastly reduced number of extranet and e-business rollouts dominated the extranet access management market in Most extranet access management activity was related to IS organizations attempting to reduce their operational costs of managing user access to externally exposed applications (primarily business-to-business) and Intranet-based applications and portals. This focus has changed product demands to more integration with Active Directory and employee-oriented applications, such as PeopleSoft and Siebel Systems, and has increased demand for provisioning integration and channel strategies. Funding for extranet access management deployment comes from flat IT budgets, and pricing pressure has been intense. There was much noise, but less action, on the standards front in The Liberty Alliance released its Liberty 1.0 specification, which extended the Security Assertions Markup Language (SAML). The Organization for the Advancement of Structured Information Systems (OASIS) approved the SAML specification. Major extranet access management vendors, and several other product vendors, announced SAML support in their products. Microsoft publicly stated that it would support several forms of identity tokens, including SAML and "Kerberos," in the Web Services Security (WS-Security) extensions to the Simple Object Access Protocol that Microsoft and IBM had developed and turned over to OASIS as a royalty-free standard. The Liberty Alliance announced that it would support WS-Security in Liberty 2.0. However, Microsoft has not detailed plans for direct support of SAML in Windows authentication and access control mechanisms, such as Passport. Gartner Entire contents 2003 Gartner, Inc. All rights reserved. Reproduction of this publication in any form without prior written permission is forbidden. The information contained herein has been obtained from sources believed to be reliable. Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Gartner shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations thereof. The reader assumes sole responsibility for the selection of these materials to achieve its intended results. The opinions expressed herein are subject to change without notice.

2 Gartner research (see "Banks Largely Disinterested in Passport and Liberty") shows that financial services companies, which are the most-likely early adopters of federated identity services such as Liberty and Passport, had no near-term ( ) plans to adopt either service. Gartner believes that the initial wave of Liberty/Passport deployment will be in the 1H04 time frame and will be driven by business-to-business services. This forecast, combined with increased market attention on reducing the cost of managing internally focused applications, places Active Directory-centric solutions in a strong position for the future because enterprise identities are tightly bound to Windows PC and network logins. Unless economic conditions make a strong turnaround and invigorated e-business rollouts are driven more by business units than IS organizations, Gartner expects that the focus on Active Directory will dominate the market through Most enterprise demand for extranet access management involved internal applications as IS organizations attempted to support a wide range of applications that were developed during the past several years. In 2002, most extranet access management product advancements involved integration with provisioning capabilities to provide workflow functions for automating user management actions across applications. Integration can lead to fewer administrators required to support a given user population across large numbers of applications, but it often is yet another per-user fee that sometimes exceeds the cost of the user access management product. Consolidation among provisioning, extranet access management and platform vendors will drive the per-seat costs down as long as the flat economy continues in These factors caused some changes in vendor positioning in Gartner's extranet access management 2H02 Magic Quadrant (see Figure 1). 8 January

3 Figure 1 Extranet Access Management 2H02 Magic Quadrant Challengers Leaders IBM Ability to Execute Novell Netegrity Oblix RSA Security Entrust Secure Computing Wipro Entegrity Baltimore Technologies OpenNetwork Technologies As of January 2003 Niche Players Visionaries Source: Gartner Research Completeness of Vision Leaders Netegrity abandoned its attempt to move beyond being a pureplay extranet access management vendor and announced that it would no longer offer the DataChannel portal product. Netegrity's large installed base, wide channel support and strong customer service capabilities provided advantages as IT spending slumped. However, the DataChannel acquisition forced Netegrity to compete with a wide array of portal and application server vendors, in addition to competing with other extranet access management providers. In late 2002, Netegrity announced a Web services transaction management product, TransactionMinder, as well as a core identity management product that will compete with Oblix CoreID. However, Netegrity's long-delayed migration to the provisioning space has yet to bear fruit. IBM has continued to execute its strategy of embedding Tivoli Access Manager (formerly Policy Director) into IBM's dominant products, such as WebSphere and MQSeries. WebSphere's strong position in the application server and portal market gives Tivoli Access Manager a strong advantage in the enterprise space. IBM's acquisition of Access360 (see "IBM Buys Access360 to Improve Tivoli Identity Manager") enables it to accelerate the deployment of integrated provisioning capabilities 8 January

4 via Tivoli Identity Manager across its product line. IBM's major weakness is a limited set of integration partners. Oblix made considerable progress in market strength and the completeness of its extranet access management offering in Oblix has been the primary beneficiary of the channel conflicts that Gartner forecast that Netegrity would experience after its acquisition of DataChannel (see "Netegrity/DataChannel Deal Fuses Access Management, Portals"). Oblix gained strong integration and business alliances with BMC, Plumtree and other vendors. Oblix's NetPoint product has been deployed successfully by large enterprises, with high marks by its customers for performance and after-sales support. Challengers Novell made limited progress in advancing its ichain product in It mainly focused on rationalizing the Novell line of security products with a marketing and branding campaign. Novell's ichain 2.2 release should make it a more-competitive offering, but Novell will bring features to market more than a year after most of its competitors. ichain continues to be a cost-effective choice for enterprises that make extensive use of Novell's other products. However, it has limited channel support outside of Novell's existing base. Visionaries RSA Security has completed the stabilization of Securant extranet access management software and the integration of Clear Trust into its product line. Because of its strength in the remote access token space, RSA Security has a strong worldwide channel and support structure. However, that strength has limited RSA Security's effectiveness in signing integration partners in the portal and application server space, where SecurID tokens are not a major factor. Entrust has moved away from enterprise infrastructure-based public-key infrastructure toward applications that integrate strong security (secure messaging and Web services). It has positioned GetAccess as a key product offering. Entrust has less visibility than RSA Security in the extranet access management market, mainly because of limited channel support. However, Entrust can build on a reputation for high-quality software and solid support. OpenNetwork Technologies made some important alliance deals with Microsoft's consulting services and Waveset in the provisioning space in Microsoft will push OpenNetwork's DirectorySmart product to bridge Unix environments with Active Directory deployments. Although this will increase 8 January

5 OpenNetwork's visibility and deal flow, this type of relationship is a two-edged sword, as CyberSafe found out several years ago becoming associated with Windows-only deployments can cause a small vendor to be excluded from consideration by large enterprises. Niche Players Baltimore Technologies and Entegrity dropped in their ability to execute because their financial status, partnering and visibility were reduced. They remain strong technology choices for niche environments. Secure Computing has developed PremierAccess to support its hardware token product. PremierAccess provides base rulesand-roles functionality, uniform resource locator protection and integration hooks. Although this offering does not compete with more-mature products in functionality, the tight integration with Secure Computing's token products makes it a solid choice for Secure Computing token customers. Therefore, we've added Secure Computing to the Magic Quadrant. Wipro gained some enterprise wins and is a viable option, especially for enterprises that use Wipro's integration services. Not on the Map We have removed or omitted these vendors from the Magic Quadrant: Vasco's financial challenges will require it to focus on fewer product offerings. It has shown no evidence that it intends to advance its Vacman product. Microsoft has no product offering in this space, although it announced that its TrustBridge technology should be available when.net Server ships in 1H03. Gartner believes that Microsoft will position TrustBridge as.net Server features that, along with Commerce Server.NET, can be used to build an extranet access management solution for environments that use Active Directory or all-windows servers. However, this will not occur until Computer Associates released a 1.0 product for extranet access management in 4Q02, which is too new to market to be evaluated for the Magic Quadrant. Its etrust Web Access Control product is based on the Security for Open Systems technology that Computer Associates previously acquired from Memco Software. Sun Microsystems' Directory Server Access Management Edition never really became a product. It has been re- 8 January

6 branded as the Sun ONE Identity Server 5.1, but it has experienced limited deployment. Calendra, based in France, offers Directory Manager for developing Lightweight Directory Access Protocol-centric applications. However, it doesn't provide much out-of-the-box functionality for integration with the typical applications that enterprises have developed. Secure Sockets Layer-based remote access vendors, such as Neoteris, SafeWeb, Netilla Networks and others, also offer some form of access control to Web-based applications. However, they don't support the variety of applications, Web servers and management capabilities that are required for effective extranet access management products. PassGo Technologies was re-established as a separate company in a management buyout from Symantec. PassGo acquired all of Symantec's authentication and access management products, including the WebThority extranet access management product. PassGo will need to demonstrate significant investment in advancing WebThority product capabilities and channel support for it to be a viable enterprise choice. Related Research "Extranet Access Management 2H01 Magic Quadrant" "1H01 Extranet Access Management Magic Quadrant" Bottom Line: The extranet access management market has broadened beyond extranets; Gartner will consider this expansion in future research. Enterprises should continue to emphasize ease of integration when investing in extranet access management solutions. 8 January