Burton Group Identity Blog

Catalyst Europe is Coming Up Fast!

Blogger: Bob Blakley

We hit the stage for Catalyst Europe on April 19.  If you haven't already made your plans to join us in Prague, we've got a little treat for you at the end of this post.

We're going to focus this year on the emerging identity architecture.  If you're looking, you can see this identity architecture around you already, in offerings from mainstream identity vendors like Microsoft and Oracle, but also in offerings from smaller firms like Gluu, Unbound ID, Radiant Logic, and others.

The elevator-pitch version of the story is this: licensed provisioning software packages compete in a market for identity management systems.  User-centric identity providers compete in a market for identity providers.  What enterprises need is neither a market for identity management systems nor a market for identity providers - what they need is a market for identities.

Federation technology, directory virtualization, and contextual access control can be combined to create a technical architecture on top of which this market for identities can emerge.  The market for identities has many advantages, but getting there will take time and it will take work.  We'll lay out the roadmap in Prague.

If (like me) you're a last-minute kinda person and you haven't registered yet, here's your reward for waiting: use the promo code "INSIDER" during registration, and you'll get your ticket for the discounted price of only 995 Euro.

Sign up today and we'll see you there!

Catalyst Tickets: Get 'em While They're Hot

Blogger: Bob Blakley

Somebody asked me this today:

Is it true that the Burton Group Catalyst conferences have been cancelled now that we've been acquired by Gartner?

Um, how shall I put this...

DON'T BE SILLY: THE CATALYST CONFERENCES ARE ABSOLUTELY HAPPENING!

Gartner bought Burton Group because they love our content, including our Catalyst content.

In fact, here in IdPS we're betting that Catalyst - both in Europe and in North America - is going to sell out early, because as a result of the acquisition we're going to have more customers.

And you're not going to want to miss the IdPS content at Catalyst this year.  The team's been taking advantage of our (ahem) unexpected get-together this week to work on our presentations.  What we're going to lay out for you at Catalyst is that 2010 marks the beginning of a revolution in the enterprise's identity architecture.  We're going to tell you what we think is coming, and we're going to show you a roadmap to help you get from the identity infrastructure you have today to the one you'll need to have in the future.

Book your tickets now; we already have.  See you in Prague, or in San Diego, or both.

Silver Bullet Podcast Interviews Bob Blakley

Blogger: Bob Blakley

Gary McGraw, Cigital CTO and software security guru, interviewed me last week in the 40th installment of his Silver Bullet podcast.  We covered a wide variety of topics, from the failure of information security, to privacy, to why it's a tragedy that rhetoric is no longer taught in the schools.  I'll warn you in advance that clicking the link may be hazardous to your productivity; I listened to 7 or 8 of the other podcast episodes last night - it's a great series.

Registration is open for IIW 2009a

Blogger: Bob Blakley

Registration is open for the first of this year's two Internet Identity Workshops.  As usual, the event is being organized by the IIW working group of Identity Commons at the Computer History Museum in Mountain View, CA; the dates are 18-20 May 2009. 

IIW is not a traditional conference; it's an "unconference" working session, and everybody participates, so if you're coming, you'll want to bring your ideas and your laptop.  There will be a hands-on intro session which covers the use of various Web 2.0 identity technologies on Monday morning, and the main "open-space" sessions begin at 1pm on Monday. 

Tuesday afternoon there's a slot in the schedule for demos, so come prepared if you've got something cool to show to the community.

What I'm really looking forward to this time is the business models discussion.  I'm researching business models for identity services this quarter, so I'm really looking forward to bringing something to the discussion in Mountain View, and I hope others come ready to talk about what works & what doesn't work too.

If you're planning to attend (I am), the organizers are offering an early registration discount.  The attendance fee is quite low to begin with, but in today's economy every dollar helps.

Relationship Paper Now Freely Available

Blogger: Bob Blakley

Folks have been commenting on our relationship work since Phil posted his Technometria interview with me on the subject.  Adam picked up on the talk with a characteristically excellent entry, and I agree with him that identity is created through relationship; in fact this is one of the points I was trying to make in the interview.  Gunnar read Adam’s post and added his thoughts here, and Tom Scott worked the relationship theory into a discussion of OAuth and OpenID here. In the comments to Tom’s post, Chris Messina asked him for a reference for the three types of identity I discuss in the Technometria interview. Until now, the reference (our “Relationship Layer for the Web” paper, which Kaliya referenced in her blog entry on the addition of Facebook to the OpenID board) has been available only to Burton Group customers.  I’m pleased to announce that as of today, it’s freely available to anyone at this link. 

The conversation about this paper has actually been going on for a long time.  Drummond kicked it off last May after reading a pre-publication draft.

Ryan, who also reviewed a draft of the paper, was confused by my proposed relationship data structure; he thinks I’ve introduced an extraneous third party into the picture and turned what should be a bilateral relationship into a multi-party affair.  Not so!  The relationship data structure is created by someone (in the case of my example in the paper it’s created by Facebook) and it asserts information about the relationship between a set of parties.  But there’s no constraint on how many parties are involved: the relationship data structure could be created by one party to describe his (her) relationship with another party.  Or it could be created by a third party (Facebook) to describe the relationship between two individuals who meet “under the auspices of the third party”.  In this case the third party sets the rules, and the individuals who subscribe to the third party’s services agree to abide by the rules.  This is simply a three-way relationship.  These arise in non-commercial contexts as well as commercial contexts; societies which practice arranged marriages are a good example.

If I wanted to I could create my own relationship object and offer it to the public as the basis for forming online relationships with me – this would not require introducing any third party Identity Provider into the picture, as Ryan claims.  And proposals to do this already exist; individuals setting the terms on which they will provide information to merchants is part of what Adriana Lukas has in mind with her Mine! Project.

Now that the paper is freely available, if you’d like to join the conversation, post a comment here or put up your own entry and track back to us.  We’d love to know what you think.

Credit where due: though I wrote the relationship paper, the work it's based on was done by our entire IdPS team, and builds on the "laws of relation" work of our former fearless leader, Mike Neuenschwander.