{"id":6800,"date":"2023-08-09T10:27:16","date_gmt":"2023-08-09T14:27:16","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=6800"},"modified":"2023-08-09T10:29:37","modified_gmt":"2023-08-09T14:29:37","slug":"identity-orchestration-stepping-off-the-identity-treadmill","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/","title":{"rendered":"Identity Orchestration: Stepping Off the Identity Treadmill"},"content":{"rendered":"

\"identity<\/p>\n

Solutions Review\u2019s\u00a0Contributed Content Series<\/u><\/a> is a collection of contributed articles written by thought leaders in enterprise software categories. Topher Marie of Strata Identity<\/a> examines how identity orchestration could help us finally step off the treadmill of access trends.<\/strong><\/em><\/p>\n

Despite moving to the cloud to achieve higher resiliency and massive increases in scale, the goal of modern enterprise access control remains the same– make sure the right people have the right access to systems and data while keeping the bad guys out. Over time, the underlying implementation methods for enforcing access control have evolved repeatedly. Consider WS-Fed, SAML OpenID Connect (OIDC), security questions, SMS codes, MFA, one-time passcodes (OTP), Universal 2nd Factor (U2F), WebAuthn\u2026 and the list keeps getting longer.<\/p>\n

Each new access control protocol, standard, and approach is supposed to address the failings of the previous iteration. It’s a war of evolving attacks and defenses. Teams have no choice but to keep up; otherwise, they will be exploited. It becomes a treadmill. We can’t consider any particular product “done” because we will need to revisit it when the next exploit is found or when a more robust technology is released. We have to keep moving forward just to stay still.<\/p>\n

This treadmill problem isn’t because of any particular tool, company, or solution. It’s the nature of a living landscape of threats and the resulting need to protect against them. As such \u2013 and despite many claims to the contrary \u2013 there is no next and ultimate solution. There is no end to the war against attackers– there is only constant vigilance.<\/p>\n
Widget not in any sidebars
\n

Identity Orchestration: Stepping Off the Identity Treadmill<\/strong><\/h2>\n
\n

Continuous Evolution of Threats<\/strong><\/h3>\n

Unfortunately, cyber thieves and other bad actors frequently have the advantage because it takes only one slip-up \u2014 an employee clicking a bad link on an email, for example \u2014 to breach an enterprise’s security. Multiply that by the hundreds or thousands of distinct applications and attack surfaces the typical corporation has, and this vigilance can be exhausting. Every app must be kept up to date on best practices.<\/p>\n

Consequently, the identity and authentication infrastructure that supports an enterprise is in a constant state of change. For instance, over the years, more advanced passwords have emerged, hashing has become standard, multi-factor authentication (MFA) has taken shape, and standards such as OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) have gained widespread adoption. Yet these standards, once greenfield and considered a best practice, now display cracks. They simply aren\u2019t up to the task of managing identities across diverse software, systems, and multi-cloud environments.<\/p>\n

And the problem doesn\u2019t stop there. A mishmash of tools, standards, and frameworks forces organizations to rewrite code to take advantage of security best practices constantly. In an enterprise that runs thousands of applications, the accumulated technical debt and costs add up quickly. What\u2019s more, there\u2019s the likelihood that along the way, software developers will introduce bugs and errors that further complicate matters or unleash more severe problems.<\/p>\n

CSMA and Orchestration<\/strong><\/h3>\n

In 2022 Gartner introduced the concept of a Cyber-Security Mesh Architecture (CSMA), which helps to mitigate these issues. The CSMA is meant to be a new robust, evolving paradigm for long-term infrastructure protection. Part of the power of this approach lies in the concept of decoupling identity from all the software residing within an enterprise. When identity data is abstracted from applications, it\u2019s possible to implement a far more elegant approach that revolves around identity orchestration. The result is a more streamlined and secure identity framework. This can help organizations step off the treadmill and eliminate stopgap solutions,<\/p>\n

Take, for instance, recent developments in the OIDC space. The latest practices are pushing for Continuous Access Evaluation (CAE), a way for applications to be notified if any changes have been made to a session that was initiated via OIDC. This means that even if an organization has very recently updated its identity practices to use the latest and greatest OIDC, they are now facing another rewrite to implement CAE, which includes potentially huge impacts on its architecture. Abstracting the identity control away from applications will mitigate this ongoing rewrite issue.<\/p>\n

Identity orchestration is prompting companies large and small to step off the treadmill and migrate to a more advanced and holistic framework. As identity becomes more embedded in the fabric of business \u2014 and the complexity of managing identity and authentication grows \u2014 businesses are recognizing that this approach lights a pathway to a more simplified yet improved form of identity management.<\/p>\n
Widget not in any sidebars
\n","protected":false},"excerpt":{"rendered":"

Solutions Review\u2019s\u00a0Contributed Content Series is a collection of contributed articles written by thought leaders in enterprise software categories. Topher Marie of Strata Identity examines how identity orchestration could help us finally step off the treadmill of access trends. Despite moving to the cloud to achieve higher resiliency and massive increases in scale, the goal of […]<\/p>\n","protected":false},"author":477,"featured_media":6801,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[],"acf":[],"yoast_head":"\nIdentity Orchestration: Stepping Off the Identity Treadmill<\/title>\n<meta name=\"description\" content=\"Topher Marie of Strata Identity examines how identity orchestration could help us finally step off the treadmill of access trends.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Topher Marie\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/\",\"name\":\"Identity Orchestration: Stepping Off the Identity Treadmill\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Its-Time-to-Step-Off-the-Identity-Treadmill.jpg\",\"datePublished\":\"2023-08-09T14:27:16+00:00\",\"dateModified\":\"2023-08-09T14:29:37+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/d6e9589ad9ae8b3cab95a6228e207384\"},\"description\":\"Topher Marie of Strata Identity examines how identity orchestration could help us finally step off the treadmill of access trends.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Its-Time-to-Step-Off-the-Identity-Treadmill.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Its-Time-to-Step-Off-the-Identity-Treadmill.jpg\",\"width\":800,\"height\":400,\"caption\":\"identity orchestration\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Identity Orchestration: Stepping Off the Identity Treadmill\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/d6e9589ad9ae8b3cab95a6228e207384\",\"name\":\"Topher Marie\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d74032f92d4169d8976aa22dc052a24a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d74032f92d4169d8976aa22dc052a24a?s=96&d=mm&r=g\",\"caption\":\"Topher Marie\"},\"description\":\"Topher Marie is the CTO and Co-Founder of Strata Identity. Previously, Topher served as Chief Cloud Architect for Oracle\u2019s global cloud identity and security portfolio, was product owner at Auth0, co-founded JumpCloud, a venture-backed identity company, was lead architect for Identity-as-a-service provider Symplified, and started his career in identity at Ping.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/tmarie\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Identity Orchestration: Stepping Off the Identity Treadmill","description":"Topher Marie of Strata Identity examines how identity orchestration could help us finally step off the treadmill of access trends.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/","twitter_misc":{"Written by":"Topher Marie","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/","url":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/","name":"Identity Orchestration: Stepping Off the Identity Treadmill","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Its-Time-to-Step-Off-the-Identity-Treadmill.jpg","datePublished":"2023-08-09T14:27:16+00:00","dateModified":"2023-08-09T14:29:37+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/d6e9589ad9ae8b3cab95a6228e207384"},"description":"Topher Marie of Strata Identity examines how identity orchestration could help us finally step off the treadmill of access trends.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Its-Time-to-Step-Off-the-Identity-Treadmill.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2023\/08\/Its-Time-to-Step-Off-the-Identity-Treadmill.jpg","width":800,"height":400,"caption":"identity orchestration"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/identity-orchestration-stepping-off-the-identity-treadmill\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Identity Orchestration: Stepping Off the Identity Treadmill"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/d6e9589ad9ae8b3cab95a6228e207384","name":"Topher Marie","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d74032f92d4169d8976aa22dc052a24a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d74032f92d4169d8976aa22dc052a24a?s=96&d=mm&r=g","caption":"Topher Marie"},"description":"Topher Marie is the CTO and Co-Founder of Strata Identity. Previously, Topher served as Chief Cloud Architect for Oracle\u2019s global cloud identity and security portfolio, was product owner at Auth0, co-founded JumpCloud, a venture-backed identity company, was lead architect for Identity-as-a-service provider Symplified, and started his career in identity at Ping.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/tmarie\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/6800"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/477"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=6800"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/6800\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/6801"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=6800"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=6800"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=6800"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}