Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Is Microsoft’s directory, identity management a service of the future?

Vendor working to build a simple identity infrastructure that applications would plug into for security, access control
By John Fontana , Network World , 03/06/2008

Microsoft is working on a series of upgrades to its directory and identity technologies in the coming months with the goal of creating a service-based identity platform.

Microsoft is leaving itself plenty of wiggle room saying that upgrades for such Active Directory and client-based features as Federation Services, CardSpace, Identity Lifecycle Manager and claims-based access control will come in 2008 “plus”. If the company follows its stated development plans to release a minor upgrade to the server every two years, the “plus” would be 2010.

But the upgrades to the directory and identity platform would be anything but minor, and the presence of the claims-based access control features points to the fact that Microsoft would like to see identity become more of a simple service and less of a complex infrastructure companies are forced to build and maintain.

Microsoft is already using claims-based access for SharePoint and Rights Management Server. Claims are a set of statements that identify a user and provide specific information. The claims are read by applications to make decisions on who gets access, who can retrieve content or who can complete transactions.

Moving forward
Microsoft has a road map for upgrading its directory that will likely be completed by the time the R2 version of Windows Server 2008 ships in two years. Microsoft is coy on timing saying only that improvements will come in 2008-plus.
Federation services
ADFS 2, new ease of management and federation capabilities 
Windows LiveID support; Managed InfoCards
Windows CardSpace 2.0 
Identity life-cycle management
ILM 3.0 
Other
Identity and access management programming platform
Support for Office 14 
Claims-based access control 
Click to see: Microsoft road map

Last week, at NetPro’s Directory Experts Conference, Microsoft expanded on its idea to create a set of identity pieces that snap together via standard protocols and provide what the company referred to last week as an “identity bus.”

The bus would move claims and be available for applications to plug into in order to take advantage of security and access control features. The bus could live on either side of the firewall and would have many places on the network where “transformers” could accept and dispense claims in many different formats.

Partner Content

NetScout is one of the world's premier providers of integrated network and application performance solutions.

www.netscout.com

Know First

Get Proactive — Move from Troubleshooting to Monitoring to Management with nGenius K2's Service Dashboard & Intelligent Early Warning Alarms

Watch the Video

Know Where

Get Rapid Performance Problem Isolation with nGenius Performance Manager and Diagnose Problems up to 70% Faster!

Learn More

Know Why

Get the Details to Validate and Solve your Toughest Performance Issues with nGenius InfiniStream and Sniffer Intelligence Modules

Read the Whitepaper

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Save The Date!
What They Are Saying

If the IT manager is knowledgeable regarding Cisco technology, he would have 2 options. Option 1 - Consult...- Anonymous

Join the Discussion