Discover the Path to FICAM Success:

Join Us for the FICAM Kick-Off, March 28, Washington, DC

If you work in identity management for a government agency, you can’t afford to miss this free FICAM kick-off.
 
Join us for an event highlighting the recently-released FICAM roadmap. Take a deep dive into the FICAM guidelines, discuss potential use cases, and gather best practices for implementation. You’ll hear from FICAM gurus Anil John and Deborah Gallagher, and explore how the RadiantOne complete identity service, based on model-driven virtualization, is being used to build the Authoritative Attribute Exchange Service. 

Sign Up Now for this Free FICAM Kick-Off

We’ll begin with a breakfast of croissants and coffee and end with lunch. Along with the speakers, there will be ample time for questions and mingling—and every attendee will receive a ticket to tour the spy museum.

If you’re charged with implementing FICAM initiatives, this is one event you won’t want to miss—we look forward to meeting you at the Spy Museum.

Check out the agenda and be sure to sign up today!
 
See you in DC,
 
The Radiant Team

Heads Up for Our Workshops, Trainings, and Events

Radiant Logic’s going on tour! We’re thrilled to announce our 2012 event line-up, with a number of great ways for you to put RadiantOne in your hands, and see what our complete identity service is all about. Check our brand new events page for dates, locations, and registration.

• RadiantOne Trainings: Don’t miss your chance to master the new RadiantOne VDS+, and get practical experience in an instructor-led classroom. This year, we’ll offer our totally revamped trainings in ten different cities, so register for one near you!
• XACML Workshops: Learn how to achieve policy-driven attribute-based access control using real-time enterprise data, with industry leaders Radiant Logic, Axiomatics, Layer 7, and Sailpoint.
• FICAM Event: Work in identity management for a government agency? Learn more about the new FICAM guidelines, potential use cases, and best practices for implementation over free breakfast and lunch at the Spy Museum!

Here at Radiant, we believe that the future’s already here— and we’ll prove that this month when we ship the first release of the RadiantOne Cloud Federation Service, so you can turn your RadiantOne VDS into one connector to the cloud, enabling SSO across your enterprise—and even from an outside device like a smartphone or a tablet. Stay tuned in February to download your free trial!

An enterprise’s flexibility is determined by how easy it is to dispatch and regroup users into groups. While many SaaS applications use groups to authorize users, some identity sources, such as Active Directory, do not make it easy to put users into groups—or keep up with changes in group status. Creating and maintaining groups manually is time-consuming and can be complex when multiple data sources are involved.

Instead of defining and maintaining static groups for cloud-based authorization, RadiantOne lets you create new dynamic groups based on existing attribute values, and populate those groups with users coming from multiple sources:

You can also import existing static groups into RadiantOne VDS and remap them to meet application requirements:

RadiantOne can even base your group definition on multiple attribute values—such as department and title—for more finely-grained group definition. Say you want a group for each department in your enterprise. With RadiantOne, all you have to do is create a dynamic group for the attribute “department” and automatically you have groups for your Sales, HR, and Marketing departments, with members coming from across all data stores.

With RadiantOne, it’s easy to leverage your existing data for attribute-based authorization in the cloud and keep those groups up to date automatically.

The new FICAM Roadmap calls for the development of an Authoritative Attribute Exchange Service (AAES) to “connect various authoritative data sources and share identity and other attributes within the shared enterprise infrastructure.” But securing complex heterogeneous environments is no easy task. Only one solution offers out-of-the-box functionality to meet—and exceed—the demands of the AAES. See how a complete identity service from RadiantOne makes it easy to build the components of the AAES—the Authoritative Attribute Manager and Authoritative Attribute Distributor—and deliver on the goals of the FICAM initiative.

>> Read our new FICAM white paper and be sure to attend the FICAM kick-off at the end of March.

Stay Tuned for More Innovations in the Coming Year

You’ve heard us talking about building a federated identity service out of distributed systems, and the critical importance of an on-premise identity hub. Considering the many disparate sources, the multiple authentication and authorization methods, and the diversity of applications accessing this identity infrastructure, we’re going to keep talking about the need for an identity service through 2012. In fact, we’re busy cooking up a new product line-up for next year, combining all the capabilities you need to overcome these challenges—including model-driven virtualization, as well as synchronization and correlation—previously available only through a collection of point solutions. RadiantOne’s new identity service rationalizes your current identity infrastructure, bridging your immediate reality with the long-term option of a hosted solution. With RadiantOne, the future’s built in—so you can face today’s challenges and take advantage of tomorrow’s opportunities.

	Best Wishes in the New Year! It’s that time of year, when we look back at the shrinking budgets and expanding possibilities of 2011, and ahead to the opportunities and challenges of 2012. Thank you for your interest and support over the past year, and here’s to a very successful new year—may it be filled with identity innovations, infrastructure advancements, and high-ROI initiatives! -Happy Holidays from the Radiant Logic Team

In the News:

Gartner IDaaS Report Includes Radiant Logic

In a recent market profile of Identity Management as a Service (#G00215472), Gartner analyst Mark Diodati identifies a growing movement towards what he calls “the Emerging Identity Bridge.” In Diodati’s words, “While the IDaaS market matures and additional IdM capabilities are supported, the identity bridge will become an important—perhaps essential—component for hybrid deployments. The identity bridge can ‘smooth over’ the differences between on-premises and hosted architectures.” With both directory sync and federation IDP capabilities, RadiantOne can serve as an identity bridge by delivering an on-premise federated identity hub for all your applications—both enterprise and cloud-based.

Identity For the Cloud, Not In the Cloud

It’s no secret that a centralized identity hub is essential for federated identity—but the pressing question is where to host it. In his report, Diodati distinguishes between three use cases where identity management and cloud computing intersect: To the Cloud, In the Cloud, and From the Cloud. He writes, “Today, the primary (and original) deployment model for IDaaS is ‘to the cloud.’ Under this model, the goal is to extend the organization’s existing on-premise IdM capabilities to SaaS and partner applications in the cloud.” If you’re like most larger enterprises, you already have a complex infrastructure with identities spread across many disparate sources—multiple AD domains and forests, other directories, databases, web services—along with a multitude of legacy applications that rely on those sources. For such companies, a move to cloud-based identity would be extremely disruptive—while using only ADFS would cover only one of the multitudes of identity repositories you grapple with every day.

Radiant Logic’s federated identity hub is the perfect choice for organizations that want to leverage IDaaS, but also need to keep user information on-premise. With the ability to aggregate, sync, and correlate identities from across the enterprise and the cloud, RadiantOne’s on-premise identity hub gives you a centralized identity source for all your applications. As an “identity bridge,” RadiantOne federates your identity to deliver a single point of access for all your applications— no matter what they do or where they’re located. Cloud applications can authenticate users against the authoritative sources within your organization—and your essential identity data doesn’t have to cross the firewall every time you synchronize user accounts. RadiantOne is a solution that spans both your immediate reality—a heavy investment in on-premise identity stores—with the long-term option of a hosted solution, so you can begin taking advantages of cloud infrastructures today.