by Mark Diodati | July 2, 2012 | 1 Comment
Last week, US-CERT published a vulnerability note on the Simple Certificate Enrollment Protocol (SCEP). The vulnerability was reported by Certified Security Solutions, a consulting company with extensive Windows and PKI deployment experience. The company’s summary of the vulnerability is here. This vulnerability—when combined with two additional pieces of information—enables an attacker to impersonate another user [...]
Category: Authentication Cloud IAM Mobility Tags:
by Mark Diodati | April 20, 2012 | Comments Off
I want to welcome you to a multi-post discussion about near-field communication (NFC). Over the next few blog posts, I will be talking about: NFC’s moving parts Impending demand from your users NFC’s potential for access to buildings and applications Missing ecosystem components The next revolution in mobility is coming: it is near field communication [...]
Comments Off
Category: Applications Authentication Cloud IAM Mobility NFC Tags:
by Mark Diodati | June 6, 2011 | Comments Off
Quest is actively building out its identity management product portfolio. Some notable acquisitions: Vintela (Active Directory Bridge – 2005) Völcker Informatik AG (provisioning/access governance – late 2010) e-DMZ Security—privileged account management – early 2011) Today, Quest announced the acquisition of Symlabs, a vendor with virtual directory and federation products. In its early days, virtual directories [...]
Comments Off
Category: Cloud IAM Uncategorized Tags: Catalyst-NA
by Mark Diodati | September 16, 2010 | Comments Off
The document referenced in my prior posts about the Arcot and VMware acquisitions (http://blogs.gartner.com/mark-diodati/2010/08/30/ca-technologies-to-purchase-arcot/ and http://blogs.gartner.com/mark-diodati/2010/08/31/vmware%e2%80%99s-purchase-of-tricipher/) is now published (subscription required). Here is the document description: In this assessment, Research Director Mark Diodati evaluates the abilities of off-the-shelf directory services and federation technologies that solve the increasingly prevalent provisioning and authentication challenges for cloud-based applications. Product [...]
Comments Off
by Mark Diodati | August 20, 2010 | Comments Off
I had the honor of facilitating the Standards-Based Provisioning Special Interest Group at this year’s Catalyst conference. The participants believe that standards-based provisioning is at a crossroads and wish to publish the following statement. The statement is based upon our conversation; all of the participants have reviewed it. I hope that the perspectives of these [...]
Comments Off
