Minggu, 08 Februari 2009

Enterprise Architecture: What does the Wall Street Meltdown have to do with Indian Outsourcing

In an economic downturn, IT's value to the business can only improve, NOT...



In a market where demand outstrips supply and there are no cost penalties when buying inefficient products, even the most incompetent of management teams could tread water and take in the money. But the moment there are real cost penalties, consumers react by seeking more efficient products. When applying this analogy to IT, the business will either skip Indian outsourcing or create a shadow IT organization that is more efficient.

Regardless of whether we talk about business or IT, this is the free market in operation. It also has the effect of revealing which management teams are asleep and which have some resilience to respond to the economic conditions. Everyone is to blame.

Whether you are a bank, an auto manufacturer or just attempting to deliver IT to the business, executives will accelerate giving the gullible more of what they seem to want and there is no management will to challenge the market's perception. Indeed, to do the right thing such as unwinding credit overload, improving fleet fuel consumption for autos or simply not allowing Indian outsourcing firms to use process as a substitue for competence will require incurring more costs in the short term. This would reduce the dividends to shareholders during the development phase. This would displease everyone. Products would retail at higher prices to recover development costs, profits would stall and the amount of tax payable to the state would drop as the companies write off their development costs. At a time when the government was cutting taxes, this loss of revenue would have been sorely missed. It was, if you care to think of it in this way, a conspiracy of ineptitude and mediocrity in every and all senses of both words...

Sabtu, 07 Februari 2009

How come the world of Identity doesn't collaborate with the world of Security?

Ever notice how the identity community focuses on the features of security products but never spends any time noodling whether their security products are written securely?

Instead of throwing daggers at the ECM community (Documentum, Stellent, etc), the OpenID community, supports of the Liberty Alliance or even the folks who still haven't figured out that Smalltalk is a dead language, I have decided to take action by making our next meeting of OWASP available via webinar.

We will have Mary Ruddy of Project Higgins and Ramesh Nagappan of Sun as our presenters. Our next meeting is on Tuesday, February 10th at 5pm Eastern in Hartford and is 100% free to attend. For those who can't attend in person, you are welcome to subscribe to our mailing list to receive webinar information...

Federated Provisioning

Ian Glazer and Nishant Kaushik discuss federated provisioning and provide some high-level scenarios that are somewhat incomplete...



Nishant's example assumes that just-in-time provisioning is about an SP accepting a SAML-based authentication and creating an SPML message. I would argue that there may be multiple business scenarios where you may need something more richer than SPML where federated identity products should also know how to invoke BPEL processes.

If we did such a thing in the insurance vertical, an incoming request isn't just about provisioning access to the system. We may need to kick off a business process where we may need to file paperwork with a state insurance department to appoint that agent in the state they reside, we may need to kick off license checks and even schedule CRM-style a followup call with that person to onboard them.

So, an incoming request may provision a user but will they be effectively provisioned? What happens if just passing attributes aren't enough and I need something more rich like XACML? How does this get mapped into SPML in his scenario? For example, if I provision an insurance agent, I might want to know that he can sell commercial insurance in texas, personal insurance in georgia and life insurance in Oklahoma, Kansas and California. I may want to also understand the structure of his organization so that I can show him commissions of his team but not of others within his organization. Note that this is more than just a discussion about roles.

Anyway, if anyone has thoughts at a deeper level, please share as I think the community would benefit from the insight...

Related Posts Plugin for WordPress, Blogger...