I've blogged and published research before about the emerging Simple Cloud Identity Management (SCIM) standard. The SCIM group has just approved Version 1.0. No, it's not your imagination: important standards around loosely coupled identity management really are being developed, tested, and deployed at a faster rate than ever before.
What does this new pace mean for security pros? New identity protocols can be disruptive to large enterprises that have already deployed older solutions, but these new solutions will enable IT organizations to reduce costs and improve agility in managing access to/from smaller partners and customers that don't have the means to deploy the heavy stuff. That makes access control easier to achieve in a Zero Trust world. (Andras Cser and I touch on the theme of "leaner and cleaner" identity protocols in our just-published Identity And Access Management: 2012 Budget And Planning Guide, and I do a deeper dive, assessing the future of SAML and the business value of newer federation protocols, in OpenID Connect Heralds The "Identity Singularity".)
Based on the very high interest in this blog and its cloud predictions we are planning to host a Forrester Teleconference entiteled "2012 — The Year The Cloud Matures: A Deeper Dive Into 10 Cloud Predictions For The Upcoming Year" on February 28th, 1-2pm EST/6-7pm UK time, where we will highlight and go through the 10 below predictions one by one. For more details and registration please follow the link to the: teleconference web page.
1. Multicloud becomes the norm
As companies quickly adopt a variety of cloud resources, they’ll increasingly have to address working with several different cloud solutions, often from different providers. By the end of 2012, cloud customers will already be using more than 10 different cloud apps on average. Cloud orchestration will become a big topic and an opportunity for service providers.
2. The Wild West of cloud procurement is over
While 2011 still witnessed different stakeholders within a company brokering (sometimes unsanctioned by IT) a lot of cloud deals, most companies will have established their formal cloud strategy by the end 2012, including the business models between IT and lines of business for their own, private cloud resources.
For years I have been railing about cloud washing -- the efforts by vendors and, more recently, enterprise I&O professionals to give a cloud computing name to their business-as-usual IT services and virtualization efforts. Now, a cloud vendor, with tongue somewhat in cheek, is taking this rant to the next level.
Appirio, a cloud integration and customization solution provider, has created the cloud computing equivalent of the Razzie Awards to recognize and call out those vendors it and its clients see as the most egregious cloud washing offenders. The first annual Washies will be announced next Wednesday night at The Cigar Bar in San Francisco, and in true Razzie tradition, the nominees are invited to attend and pick up their dubious honors in person. I'm betting that Larry Ellison will be otherwise engaged.