The rise of network-based, automated services in the past decade has definitely changed the way businesses operate, but not always for the better. Offering services, conducting transactions and moving data on the Web opens new opportunities, but many CTOs and CIOs are more concerned with the risks. Like the rulers of medieval cities, they've adopted a siege mentality, building walls to keep the bad guys out. It makes for a secure perimeter, but hampers the flow of commerce.

Fortunately, some corporations are beginning to rethink how they provide security, so that interactions with customers, employees, partners, and suppliers will be richer and more flexible. Digital Identity explains how to go about it. This book details an important concept known as "identity management architecture" (IMA): a method to provide ample protection while giving good guys access to vital information and systems. In today's service-oriented economy, digital identity is everything. IMA is a coherent, enterprise-wide set of standards, policies, certifications and management activities that enable companies like yours to manage digital identity effectively--not just as a security check, but as a way to extend services and pinpoint the needs of customers.

Author Phil Windley likens IMA to good city planning. Cities define uses and design standards to ensure that buildings and city services are consistent and workable. Within that context, individual buildings--or system architectures--function as part of the overall plan. With Windley's experience as VP of product development for Excite@Home.com and CIO of Governor Michael Leavitt's administration in Utah, he provides a rich, real-world view of the concepts, issues, and technologies behind identity management architecture.

How does digital identity increase business opportunity? Windley's favorite example is the ATM machine. With ATMs, banks can now offer around-the-clock service, serve more customers simultaneously, and do it in a variety of new locations. This fascinating book shows CIOs, other IT professionals, product managers, and programmers how security planning can support business goals and opportunities, rather than holding them at bay.

Amazon.com® Reader Reviews (Ranked by Helpfulness)

Average Amazon.com® Rating:  Based on 13 Ratings

Poorly written high-level content. - 2008-02-17
Reviewer Rating:
In my opinion, this book is really feeding the buzzwords frenzy of Identity management domain . It certainly "talks the talk", but can it "walk the talk"? - Full of google-able content and no meat. I can think of numerous glaring examples where the book falls short. To name a few: SAML (huh? where is SAML 2.0), XACML, Liberty, WS-Federation
I think the book does a below average job of providing practical information. Even the content does not flow very smoothly and coherently.
I wasted mu money, now this book going to be on my shelf collecting dust.

high-level concepts but no practical guidance - 2007-03-21
Reviewer Rating:
This book gives a hello world introduction about digital identity concepts and nothing beyond. The book absolutely fails and falls short on explaning the identity management standards and technologies related to single sign-on, federation, provisioning and assurance. From a real-world IDMS deployment perspective the book is truly misleading !

Excellent book on Identity Management - 2007-07-26
Reviewer Rating:
Identity Management is my day to day job as our company heavily focuses on various IAM initiatives.I was always looking for a book that can give enough material on how to go about design, deploy IAM solutions. This book is the one for it. This book really deserves 5 stars.
Thanks,
Ramnath Krishnamurthi,
C.E.0
Like Minds Consulting Inc,
New York, U.S.A

Practical and Informative - 2007-06-25
Reviewer Rating:
A great book, cover to cover - and exceptionally well organized. The subject matter is covered in a methodical, clear manner, and is applicable to both the expert and the neophyte to IdM. I was very impressed by the practical nature of the book; the recommendations are actionable and easy to follow. This book may well be the definitive text on digital identity management. I highly recommended it!

Confusing technology with delivery management - 2010-01-07
Reviewer Rating:
Though this book covers some basic issues surrounding identity management, the architecture part is very weak. What I felt is that the author is confusing delivery management with the technology itself. Major sections of the book (under the guise of governance) are devoted to people and expectation management and politics rather than technology. Majority of what is discussed is applicable universally to execution of any project in any decent sized organization. Not that this books has nothing to offer on IMA itself - but it is too generic and very little on actual technology.

Browse Similar Topics

Top Level Categories:
Business
Computer Science
Enterprise Computing
Internet/Online
Security

Sub-Categories:
Business > Management Strategy
Computer Science > Information Theory
Enterprise Computing > Security
Internet/Online > Personal Privacy
Internet/Online > Business Strategy
Security > Enterprise Computing