Identity compliance projects don't have to be hard! The key to any successful project in IT is delivering value to the business quickly! It is critical to then leverage those early wins into larger wins for the organization. When I used to coach I likened this to walking up a staircase. McKinsey used the analogy to describe the approach successful companies took to manage successful growth. (take a look here)
Oracle Identity Analytics provides a set of tools that can help organizations take the first step up that staircase to Compliance quickly. The approach allows organizations to show value quickly and then build upon those early wins to build better security into the organization. This webcast tomorrow will give insight into how organizations can build in proper segregation of duties, 360 degree review's and proper attestation of roles. One customer of the product used to print out a conference room of paper and had his compliance auditors and business managers review the roles and access rights to meet compliance. Imagine if you had the tools to ensure you could make this process easier. Register today and find out how.
The Zone Manager, also known as Brad Diggs, has written a comprehensive blog post (here) on how to get Directory Server Enterprise Edition from Oracle. As a strategic product, we released a new version of Directory Server Enterprise Edition 11gR1 which Brad also gives great instructions on how to download.
Also, stay tuned for updated information on our upcoming Oracle Open World plans. If you have not registered yet, please go to the following page to get more information and register today.
Importing an ldif file is a common task that every engineer needs to create a directory service. This is also a task that some engineers need to perform when restoring an instance in their topology. DSEE 7 has introduced new innovations into the code has resulted in 5x improvements in performance.
Wajih Ahmed, this Wednesday, will detail how he used the new F-20's to improve import times using DSEE 7. This improvement results in real measurable time/cost savings. Since these tasks sometimes take place over weekends or during maintenance periods this means engineers will have more time to do other things. We want to know what are they doing with that time?
Here is a potential list of activities they might be doing with that extra time:
Perusing Facebook to find out what is going on with their friends today.
If you have other creative ideas on what engineers should be doing with this extra time that DSEE 7 has given back, please share below. I think everyone should be getting ready for the Olympics so I have included the latest video on the Torch Relay from the Vacouver Winter Olympics site.
This week we have been sharing the different ways customer's can use compression to improve performance and reduce cost within your Directory Server Enterprise Edition environment. On Wednesday, Brad Diggs, shared how customer's can use compression to reduce their storage footprint by 60%. Today, Ludo Poitou, Community Manager for OpenDS, wrote a great blog post on how to use compression in your OpenDS 2.2 instance. Ludo shows how OpenDS can reduce the overall size of your directory instance. He also gives pointers to how to configure in your directory environment.
Next week, Wajih Ahmed will be talking about how customer's can "Improving Import Speed Through ZFS Caching of LDIF import file". He will show import rate of ds7 and opends with and without primary and secondary cache disabled vs. enabled. This is another great example of the proven performance that Sun on Sun provides.
DSEE 7 launched in November and just after Christmas a couple of our Directory experts in the community at Sun took it for a test drive on the new F-20 PCIe flash drives at Sun. The results confirmed the internal testing we did in the improved performance in import times, the reduction in Directory footprint due to compression and the overall performance improvements for DSEE 7. This is critical for our customers because it will allow them to take advantage of growth in their business while bending the operational cost curve for their system. In some organizations, their operational budget is their biggest line-item so being able to meet growth targets while also addressing the time, cost and complexity of servicing the environment can release capital for investment in new product development.
The team that did this great work has agreed to share the results of their testing in a series of blog articles over the next week. The first article will be presented tomorrow by Brad Diggs, Principal Field Technologist. Here are just a few highlights from the results that Brad will share tomorrow on compression:
The storage footprint was reduced by as much as 66%.
We were able to cache greater than 50% more entries into the filesystem cache.
Compression almost completely negated average entry growth that is due to the natural addition of operational attributes and replication metadata over time.
The nsslapd-db-page-size could be smaller and more consistent with entry growth over time.
The other team members will be sharing insights that they learned during the testing so I encourage you to bookmark these blog's and take a look over the next couple of weeks. The team will be sharing not only the results but the lessons learned. One of the blog articles will discuss tuning to get better import times as well as how to set-up your own SLAMD environment to test your Directory infrastructure. Please bookmark the following blog locations to see the results:
Brad Diggs, Principal Field Technologist, here Ludo Poitou, OpenDS Community Manager, here Mark Craig, Directory Integration Team Manager, here Wajih Ahmed, Principal Field Technologist, here Nick Wooler, Directory Server Product Line Manager, here
As you look at your business goals for 2010 and are looking for ways to meet your growth goals while keeping your costs under control then take another look at Directory Server 7. Does your Directory Server provide you with the proven performance and continued innovation as Sun Directory Server Enterprise Edition 7?
Sun OpenDS TM Standard Edition (SE) 2.2 is an updated
version of newest member of the Sun Directory Server family of
products. It includes an LDAP core that is designed for easy
installation, embedding, and configuration as well as a new Directory
Proxy Server for load-balancing, high availability and data
Sun OpenDS SE 2.2 is a high-performance, highly-extensible, pure
Java directory server that delivers a fully compliant LDAPv3 server
that passes all of the compliance, interoperability and security tests
suites. Furthermore, Sun OpenDS SE 2.2 implements most of the standard
and experimental LDAP extensions defined in the IETF as RFCs or
Internet-Drafts, ensuring maximum interoperability with LDAP client
With a limited footprint allowing the server to be embedded in other
Java applications, OpenDS has a very rich set of APIs making it easy to
extend and increase usage scope.
Sun OpenDS SE 2.2 also supports a multi-master replication model
with optional assured replication that guarantees the high availability
of the data for all operations, searches or updates. While
theoretically unlimited with regards to the number of masters, the Sun
OpenDS SE 2.2 server has been stressed under heavy and durable load
with 8 Masters.
This 2.2 version significantly increases performance both in read
and write, making it one of the most efficient commercial directory
Sun OpenDS SE 2.2 is based on the open source community project OpenDS
that is constructing next generation directory service software. The
initial effort is led by Sun and the primary contributions are by Sun
employees, but the goal is to attract developers and other interested
parties from around the world. Sun OpenDS SE is the Sun commercial
offering based on this project.
You can find out more information about Sun OpenDS SE 2.2 commercial release at:
Next week, Nov. 9-11, the Identity Management Team travels down to Gartner Identity Access Management conference to showcase two of our latest releases DSEE 7 and Role Manager 5. Gartner IAM is a great event because it not only gather's together experienced practitioners in the identity management space but has a number of events that are small enough that you can have quality conversations about real problems. Last year, Verizon presented at this conference on the Directory and OpenSSO implementation that serves 50M users. The presentation is a great example of the proven expertise that Sun brings to Identity Management and the proven extranet scale our products can support---not a marketing benchmark.
Our team has taken a different approach to this even this year and we are participating in Gartner's Learning Lab's. Vendors, customer's and identity specialists are encouraged to come-by in a classroom style and learn about specific problem's Sun's product, partner's and customer's are doing to solve their identity business problems. This is crucial today as the cost of failure or doing nothing rises exponentially. The best way to ensure success is to learn from real-world implementations not marketing based slideware presentations. This is why we have assembled not just the product teams but partners and real customer's to share their experience in these "learning labs".
The other great thing about Gartner IAM is that there are usually a few different ways to combine great industry expertise and a little fun. On Tuesday, Nov. 10 at 9:00pm you can meet the Sun Identity team at the Hard Rock Rooftop bar for drinks and conversation. The first 50 people get a wristband for free drinks. Identity management isn't hard so come to the Hard Rock to find out how to make it easy!
Gartner IAM Sun Schedule
Monday, Nov 9th
12:40 - 1:05pm “Increase Speed &
Performance while reducing TCO with Sun Directory Server Enterprise
Edition” Speaker: Nick Wooler, Sr Product
Manager – Sun Microsystems
1:05 - 1:30pm “Changing the Rules of
the game; Raising the bar with Rule Life-cycle Management and
closed-loop remediation” Speaker: Neil Gandhi, Sr Product
Manager – Sun Microsystems
1:35 - 2:00pm "IAM Governance,
Risk and Compliance -- the future of IAM", Speaker: Sachin Nayyar, President -
2:05 - 2:30pm "Enterprise Single
Sign On for Sun Identity Management", Speaker: Stephane Fymat, VP of Strategy
and Product Management - Passlogix
12:30 - 2:30pm Mat Hamlin showcasing Identity
Tuesday, Nov 10th
12:10 - 12:35pm “Role based user
provisioning; using business roles for identity life-cycle management
and identity auditing”, Speaker: Mat Hamlin, Sr Product
Manager, Sun Microsystems
12:35 - 1:00pm “Three tough
challenges, one powerful solution: OpenSSO for web access management,
federation and Web services security”, Speaker: Daniel Raskin, Chief Identity
Strategist – Sun Microsystems
1:05 - 1:30pm "Privileged
Identity Risk Management: Mitigating the Insider Threat", Speaker: Richard Weeks, VP of Channels
and Business Development, Cyber-Ark
1:35 - 2:00pm "The WHO behind the
WHAT: Arcot Authentication and Sun OpenSSO Enterprise " Speaker: R 'Doc' Vaidhyanathan, Chief
Product Officer - Arcot
Sun's Identity Team have been busy over the summer! On Oct. 9, 2009 the Identity Management Team announced the release of Directory Server Enterprise Edition 7 and Role Manager 5. Next Wednesday, Oct. 21 at 8:00am PT, Neil Ghandi (Role Manager Technical Product Manager) and Nick Wooler (Product Line Manager, Directory Services) will be giving an overview of some of the great features that exist in the new releases. Here are a couple of highlights:
What's New with Directory Server EE 7.0
• Boosts speed and performance: DSEE 7.0 has been optimized to improve performance of some operations by more than 3x the current version. In addition, this release provides hardware optimization with up to 60% improvement in authentications and modifications. • Reduces Total Cost of Ownership– Reduce cost by using the only solution in the market that provides customers with a directory server, virtual directory, proxy server, web console and Active Directory synchronization tool-kit under a single license. • Hassle Free Upgrade – DSEE 7.0 provides a simple upgrade path and provides 5x performance improvement in data import times, thereby reducing migration costs.
What's New with Role Manager 5.0
• 360 Degree View of Assigned Access – A unified view of data related to user access that empowers reviewers to make more intelligent decisions concerning users access. • Closed-loop Remediation – A complete end-to-end solution for reviewing user access and removing inappropriately assigned access. • Rule Life-cycle Management – The first solution for managing the complete life-cycle of role assignment and SoD audit rules.
Interested in hearing more? Interested in hearing more about the release and what business problems it solves for your enterprise? Register here for the Webinar here:
Improve Compliance, Access Controls, and Performance with Sun's Latest Releases of Role Manager and DSEE
Daniel Raskin, Senior Product Line Manager for OpenSSO, wrote a great blog today posting the slides and video recording
of a recent presentation where Damodaram Bashyam, Directory of IT, at Verizon Wireless at Gartner IAM in Orlando last Fall. The video below from Daniel's blog allows us all to hear about his deployment of OpenSSOand Directory Server.
It is an example of the great content that is presented at Gartner
and we hope you will join us for the next Gartner conference in London
on March 23-26.
It is a powerful example of the
talented engineers we have at Sun and the results of good partnerships
with customers like Verizon. Scalability and high availability are a
part of our DNA at Sun and as you can see from the video and
Damodaram's presentation we believe live case studies prove the value
of our product better than any controlled benchmark. Watch and listen:
Here is a quick overview of the performance statistics from the presentation. Download it here
The product management team will be attending Burton Catalyst Europe in Prague next week. This is a great conference that brings together a number of thought leaders and practitioners in the Identity, Security and Dyanmic Data Center spaces to talk about real problems. One of the tag-lines of the conference is to remove "Vendor-Hype" which is a refreshing approach. As a vendor we attend the conference to have additional conversations with customers and analysts about the problems teams are experiencing, creative solutions that are being employed to solve those problems, and contribute our voice to where we believe the industry is headed.
Additionally, while we are in Europe, on Tuesday, October 28 we will be attending the Sun Identity User Group in Munich. This User Group session is open to all Identity Manager, Access Manager, Directory Server Enterprise Edition, and Federation Manager customers. For anyone new to this User Group, it is a customer driven forum providing a valuable opportunity for customers to exchange practical and technical knowledge and experiences. Here is information on the time and location:
Sun Identity Management User Group - EMEA 2008 Tuesday, October 28, 2008 9:00 am - 4:30 pm Registration & Continental Breakfast will begin at 8:30 am Sun Microsystems GmbH Sonnenallee 1 85551 Kirchheim-Heimstetten
The agenda of the User Group can be found here. You can register for the User Group by going here.
This blog provides information regarding Oracle Unified Directory and Oracle Directory Server Enterprise Edition products. Use this blog to get the latest breaking information regarding releases and updates plus other technical and non-technical information.