Comments on: Dear Enterprise Application Vendors:

By: Nishant Kaushik

Nishant Kaushik — Fri, 11 Apr 2008 16:39:58 +0000

For me, the key to this whole thing is the brick wall you have alluded to – how do I, as an application architect/designer/developer, go about doing this? There is a lot of work we as an industry have to do to enable them. We have to do for identity management what JMS did for messaging in the J2EE space. My answer has always been to try and get a comprehensive set of Identity Services defined, along with an API interface (coding to standards is really hard, and the standards change too much, better to use them as API-to-Provider bindings).

Like I said in my post, we’re listening :)

By: Talking Identity :

Talking Identity : — Fri, 11 Apr 2008 04:50:15 +0000

[...] ever thought-provoking Pamela Dingle has issued a challenge to Enterprise Application vendors. In it, she puts forth the idea that technology and market demand has reached the point where those [...]

By: Pam is on a roll at tuesdaynight

Pam is on a roll at tuesdaynight — Wed, 09 Apr 2008 02:43:52 +0000

[...] her open letter to application vendors and roles versus rules, Pamela Dingle is kicking up a lot of dirt. I tend to agree with most of [...]

By: Great message, wrong audience « Identity Blogger

Great message, wrong audience « Identity Blogger — Sat, 05 Apr 2008 01:35:18 +0000

[...] 5, 2008 · No Comments Pamela Dingle has some great suggestions about identity enabling applications that she directs at the application vendors. The problem is [...]

By: Nick Owen

Nick Owen — Wed, 02 Apr 2008 21:23:48 +0000

Hopefully, this will be the start of a trend…

By: Brian

Brian — Wed, 02 Apr 2008 19:37:37 +0000

here here!

(bet you didn’t see that one coming did you?)

I couldn’t agree with you more Pam. I keep talking with more and more vendors, whether hosted services or enterprise applications, and the recurring theme seems to be, “We support x and z, but can’t do y”. Stop locking yourself into x, y, or z – Let me bolt on whichever authn/authz scheme I have decided to use. But when I say “bolt on”, I do not mean “perform surgery on your application”.