Expanding on the Oracle-Sun IdM Strategy
With the Sun acquisition complete, we can finally start talking about what this means for various product lines. Thomas Kurian touched on the identity management strategy in the big Wednesday launch event, and I recapped what he said in my previous blog post. Now, the next level of detail has come from Hasan Rizvi, SVP for Oracle Fusion Middleware, in this product strategy webcast. Definitely take the time to check out the webcast, as there is a lot of good information in there. Below is a brief overview for each of the IdM product areas.
Directory Services
Sun Directory Server Enterprise Edition (DSEE) and Oracle Internet Directory (OID) will co-exist as strategic products (contrary to some interpretations out there). This is because each product has a unique set of capabilities that address different market segments and use cases. Oracle will innovate both directories, which includes adding some of the administration, reporting and systems management capabilities that have been built for the OID and OVD products to the DSEE product. Sun DSEE will be re-branded as Oracle Directory Server Enterprise Edition.
Meanwhile, Sun OpenDS will continue as an open-source project.
Oracle Virtual Directory will be the strategic product for identity virtualization.
Access Management
Oracle Access Manager will be the strategic product for web single sign-on. Sun OpenSSO will continue on as an open-source project for the community.
Sun’s Fedlet capabilities will be integrated into Oracle Identity Federation, which will be the strategic product for Federated Single Sign-On.
Sun’s Secure Token Service will become part of the Oracle Access Management Suite going forward.
Products that aren’t impacted by the Sun acquisition, and therefore remain strategic for their specific areas are Oracle Entitlement Server (fine-grained authorization), Oracle Adaptive Access Manager (strong authentication and risk-based access management), Oracle Web Services Manager (SOA + Web Services security) and Oracle Enterprise SSO (SSO for Desktop and Mainframes).
Identity Administration
Oracle Identity Manager will be the strategic identity administration and provisioning product moving forward. Sun Identity Manager, re-branded as Oracle Waveset (didn’t think I’d hear that name again outside of reunions), will be maintained for quite some time, and some of its key features like IDE integration and tamper-proof auditing will be integrated into OIM.
Identity Governance
Sun Role Manager will be re-branded as Oracle Identity Analytics and will become the strategic identity governance product in the Oracle Identity Management Suite. It will provide capabilities in the area of role mining, compliance attestation, and identity dashboards and reports, and will be enhanced to leverage some of the best-of-breed capabilities that Oracle has in the area of business intelligence and data mining. Note that role lifecycle management capabilities continue to be offered currently via the Oracle Role Manager product.
General
Throughout this acquisition, Oracle’s focus is on the customer. We want to make sure that customers continue to remain successful in their projects, and get value from the investments they have made. This is reflected in some of the strategic decisions made, and in points made throughout the webcast:
- In most cases, Oracle will be developing migration tools to help customers move to the new strategic products.
- Oracle will be providing support and maintenance for all the Sun products for a very long period of time, including lifetime support in certain cases.
Obviously, there will be a lot more information coming in the next few weeks/months. Stay tuned, and check out oracle.com/identity for more information.
As someone who is about to deploy DSEE+OpenSSO to a university, I'm a bit worried about the “Sun OpenSSO will continue on as an open-source project for the community” bit in particular. OpenSSO was chosen over other solutions as it was affordable and open yet had the backing of Sun support. Guess Oracle won't be supporting it after our current contract is up then?
Also a bit worried about support implications for DSEE (and I guess, the other JES products and Solaris). Oracle support is very expensive. Sun support is affordable. Unless Oracle have plans to carry on with similar support levels and costs that Sun had then I suspect we will dropping them completely 🙁
Of course, Sun was cheaper, and made no money – maybe this market just isn't worth the hassle if they can't make money out of us 🙁
You said “strategic” many times, in particular
“Oracle Virtual Directory will be the strategic product for identity virtualization”
What does this mean in simple terms?
“Strategic” means that this is the product that we will be innovating and developing new features for.
So, the current LDAP proxy in DSEE will be given up ?
Yes. OVD is strategic and will eventually replace DP
So, the current LDAP proxy in DSEE will be given up ?
Yes. OVD is strategic and will eventually replace DP