As Cloud Computing matures, security and identity are the No. 1 issues impeding widespread adoption. The Cloud Identity Summit is an environment for questioning, learning, and determining how identity can solve this critical security and integration challenge.
 


The Summit features thought leaders, visionaries, architects and business owners who will define a new identity-aware world delivering innovative security and access controls for cloud computing.
 


The Cloud Identity Summit offers discussion sessions, instructional workshops and hands-on demos in addition to nearly three days of debate on standards, trends, how-to’s and the role of identity management in a secure cloud.

Topics

Understanding the Cloud Identity Ecosystem

Entirely new businesses and business models are emerging around the cloud identity ecosystem. Discover the roles and benefits of a  secure cloud provided by third-party identity providers, independent strong-authenticators, security assurance certification providers, reputation providers, and policy and rights management intermediaries.

Recognizing Cloud Identity Use-Cases

Secure enterprise SaaS requires more than extending internal directories, controls and processes.As the cloud matures, developers will no longer know if applications are running in their data-center or in the cloud. To re-unite applications with their rightful users, identity is a must. Explore use-cases to gain insight into what’s possible today and what’s needed for tomorrow.

Standardizing Cloud Integration
Clouds of identity are relevant today but are not tomorrow’s reality. To ensure flexibility we need agreed upon standards for inter-cloud integration. Find out what experts are recommending.

Dissecting Cloud Identity Standards
Secure internet identity infrastructure requires standard protocols, interfaces and API's. How do we make sense of OpenID, SAML, SPML, ACXML, OpenID, OIDF, ICF, OIX, OSIS, Oauth IETF, Oauth WRAP, SSTC, WS-Federation, WS-SX (WS-Trust), IMI, Kantara, Concordia, Identity in the Cloud (new OASIC TC), Shibboleth, Cloud Security Alliance and TV Everywhere?

Privileged Access in the Cloud Best Practice
Who's in your cloud? Who's managing your cloud? Privileged access controls take on new importance in the cloud because many of the security constructs used to protect your own network don't apply.

Planning for Cloud-Based Identity Services

The trust no one assumption used with directories carries burdens and costs especially when contractors, partners, customers, retirees or franchise employees need access to internal applications? Must companies maintain user account information for all that access it’s systems? Does the answer lie in the coming wave of cloud-based identity and outsourced directory providers? Who is prepared to leverage these services?

Preparing for Consumer Identity
OpenID and Information cards promise to give consumers one identity for use everywhere, but where are these technologies in the adoption life-cycle? How do they relate to what businesses are already doing with their partners, and what is required to create a dynamic trust fabric capable to make the two technologies a reality?

Making Cloud Identity Provisioning a Reality
Enterprises have invested billions in access privileges for internal business applications, but SaaS adoption has largely bypassed these systems providing new IT challenges. How can the enterprise ensure proper security, controls and automation for SaaS usage? Do privileged account controls extend to the cloud and, if so, how? Are corporate credentials accidentally being duplicated in the cloud? Does the enterprise even know about it?

Security & Personalizing Mashups
The use of enterprise 2.0 technologies and REST-based protocols are creating issues around conveying user identity in web services interactions using standards-based mechanism. WS-Trust is common in enterprise SOA architectures, but OAuth is becoming the standard of choice for identity over the web (application-to-application) for authorization in a lightweight manner,  resulting in more personalized end-user services and more security for the service provider.

Enterprise Identity meets Consumer Identity
There are two overlapping sets of infrastructures being deployed now that duplicate many use-cases, including Single Sign-On to web applications where user authentication originates in one domain but then must access a resource in another domain. How will these infrastructures normalize? How will enterprises deal with security assurance levels required for their B2B interactions with the convenience they have with their customer interactions?

Cloud Security Event Monitoring

If you've invested in SEIM, you have knowledge about what’s happening behind your firewall, but can you see beyond your enterprise into employee activity in the cloud? What is being done to align controls on what’s happening beyond enterprise walls with established internal controls?

Let's Build our Future