This document discusses building an enterprise identity provider (IdP) to address security, scalability, and governance of federated identity and access management. It describes what an enterprise IdP is and its benefits, including being a federated identity service, security token service, providing a 360 degree view of identity, and more. It outlines considerations for building an enterprise IdP such as for scalability, ROI, durability, and longevity. Potential pitfalls are also discussed like responsibility issues, skills gaps, lack of time and sponsorship. Planning recommendations include committing to a strategic IAM view, formalizing an IAM program, selling the idea of an enterprise IdP, and leveraging strategic partners.

1. Virtual Identity: The Vision, Challenges and
Experiences in Driving an Enterprise IdP
Initiative
Steve Tout

2. § Part analyst, developer,
investor, instigator and
introvert
§ 15+ years in enterprise IAM:
VMware, Oracle, US Bank,
AT&T Wireless
§ Director – Cybersecurity &
Privacy at PwC
§ Author at Elsevier Syngress
Copyright © 2015 Cloud Identity Summit. All rights reserved. 2

3. Copyright © 2015 Cloud Identity Summit .All rights reserved. 3
An Enterprise IdP is the ideal solution to
address the security, scalability and
governance of federated IAM in the modern
enterprise.
© Jimstunt | Big Tree photo. Used with
permission.

4. What is it?
• Federated identity (provisioning) service
• STS for federated access management
• 360 degree view of identity
• Directory virtualization and synchronization
• Enhanced authorization
• Audit and governance framework
• Intelligent enterprise data model for IAM
• Master data management, not just IdM!
Copyright © 2015 Cloud Identity Summit. All rights reserved. 4

5. Copyright © 2015 Cloud Identity Summit .All rights reserved. 5 © Nospmisk | Golden Gate Bridge At Sunset Photo. Used with
permission.

6. Building the Enterprise IdP
• Build for scalability
• Build for ROI
• Build for durability
• Build for longevity
Copyright © 2015 Cloud Identity Summit. All rights reserved. 6
© Oceanfishing | Long Distance Runner
Photo
Used with permission.

7. Copyright © 2015 Cloud Identity Summit .All rights reserved. 7
CloudOn-Premise
<<Extend>>
Hybrid
Enterprise
IAM
Info-
Sec
GRC
Enterprise
IdP
Access
Self
Service
Identity
Extending & managing IAM

8. Copyright © 2015 Cloud Identity Summit .All rights reserved. 8
© Marekuliasz | Conflict Resolution Strategies Photo. Used with

9. Pitfalls
• Responsibilities and ownership
• Skillset gaps
• Time – nobody seems to have any
• Complicated cost model for new shared services
• Lack of sponsorship
Copyright © 2015 Cloud Identity Summit. All rights reserved. 9

10. Copyright © 2015 Cloud Identity Summit .All rights reserved. 10
• Commit to a strategic view of IAM
• Formalize the IAM program
• Sell the Enterprise IdP
• Leverage strategic partners
Planning considerations
© Wisconsinart | Funny Used Car
Salesman Or Crooked Banker, Lawyer
Photo
Used with permission.

11. Copyright © 2015 Cloud Identity Summit .All rights reserved. 11
@stevetout
Questions?