About this Constellation ShortList™
Cloud identity & access management (Cloud IAM) has become de ri- gueur certainly for all but the biggest enterprises. Drivers for growth in this category include the ease of admin, scale, elasticity, superior security of cloud services and the rich identity management func- tionality offered by service providers.
Additional Cloud IAM features commonly include application-level integration of office automation products, a pre-integrated catalog of third-party applications that will seamlessly consume the cloud-is- sued identity, mobility support and a range of multifactor authentica- tion (MFA).
Cloud IAM has revolutionized identity management for the enter- prise. It is getting new employees online quicker, outsourcing the help desk, standardizing account life-cycle management, improving security and compliance, and making MFA widespread. It also broad- ens the utility of employee logons by connecting them to many more platforms and external services.
The strongest trend in IAM is the shift away from general purpose personal identity to contextualized purposeful credentials, deployed in cryptographically verifiable wallets. APIs are emerging for loading wallets and proving credentials. New verifiable credential standards will transform the traditional credential bureau market from plastic cards for offline use to data wallets for digital presentation.
Constellation considers the following criteria for these solutions:
- User provisioning administration
- Account life-cycle management
- Cryptographic multifactor authentication options
- Upgrade paths to verifiable credentials and smart wallets
- FIDO Alliance support
- Standards and standardization activity
Identity management and authentication are rapidly evolving fields with huge potential to transform workflows through verifiable cre- dentials and digital presentation. Constellation looks for vendors active in the standards com- munity, committed to innovation and continuous improvement.
The Constellation ShortList™
Constellation evaluates more than 20 solutions categorized in this market. This Constellation ShortList is determined by client inquiries, partner conversations, customer references, vendor selection projects, market share and internal research.
- OKTA (AUTH0)
- PING IDENTITY
Frequency of Evaluation
Each Constellation ShortList is updated at least once per year. Updates may occur after six months if deemed necessary.
Constellation clients can work with the analyst and the research team to conduct a more thorough discussion of this ShortList. Constellation can also provide guidance in vendor selection and contract negotiation.