WEBINAR The Forrester Wave Identity Management And Governance

WEBINAR The Forrester Wave™: Identity Management And Governance, Q 2 2016 Merritt Maxim, Senior Analyst September 28, 2016. Call in at 12: 55 p. m. Eastern time

We work with business and technology leaders to develop customer-obsessed strategies that drive growth.

Identity management challenges are still alive and real Please choose an answer that best reflects your company’s new hire onboarding process. Base: 56 to 64 TM professionals; Source: Forrester’s Q 3 2015 Global Identity Management Online Survey © 2016 Forrester Research, Inc. Reproduction Prohibited 3

Increasingly complex IT environments strain manual onboarding processes “What is the average number of accounts created for each new user on day 1? ” Base: 35 TM professionals; Source: Forrester’s Q 3 2015 Global Identity Management Online Survey © 2016 Forrester Research, Inc. Reproduction Prohibited 4

Today’s org structures are highly dynamic “What percentage of your employees change job roles (promotions, reorganizations, etc. ) in a given calendar year? ” Base: 28 TM professionals; Source: Forrester’s Q 3 2015 Global Identity Management Online Survey © 2016 Forrester Research, Inc. Reproduction Prohibited 5

Access anywhere, anytime © 2016 Forrester Research, Inc. Reproduction Prohibited 6

It’s not an “or” but an “and” relationship between employee experience and operational excellence Digital operational excellence Employee experience + © 2016 Forrester Research, Inc. Reproduction Prohibited 7

Identity management and governance (IMG) plays a paramount role › Application access › Password recovery › Access request management Employee experience › Access certification © 2016 Forrester Research, Inc. Reproduction Prohibited 8

IMG reduces complexity and cost › Minimize the risk of data breaches. • IMG solutions can identify compromised credentials, overprivileged users, stale or orphan accounts, and segregation of duty (So. D) violations to maintain principle of least privilege. › Improve end user productivity. • IMG solutions automate and centralize the process by which users can request and gain access to applications, yielding significant employee satisfaction and productivity gains. › Deliver operational efficiencies. • IMG solutions alleviate administrative headaches for managing and granting user access to applications by providing a centralized platform with workflow, delegated administration, analytics, and reporting to ensure that technology management grants access efficiently and within defined business rules and policies. © 2016 Forrester Research, Inc. Reproduction Prohibited 9

Forrester Wave™ evaluation: inclusion criteria › A productized and publicly announced identity management and identity governance offering › At least $20 million in annual IMG license revenue over the past four fiscal quarters › At least 50 paying customer organizations in production › A mindshare with Forrester’s clients during inquiries › A mindshare with other IMG competitive vendors © 2016 Forrester Research, Inc. Reproduction Prohibited 10

The Forrester Wave™: Identity Management And Governance, Q 2 2016 Source: The Forrester Wave™: Identity Management And Governance, Q 2 2016 Forrester report © 2016 Forrester Research, Inc. Reproduction Prohibited 11

IMG acquisitions, 2002 up to present Source: The Forrester Wave™: Identity Management And Governance,

Forrester Wave™ evaluation: current offering 1. User account provisioning 2. Role management 3. Access request management 4. Access certification 5. Integration and APIs 6. Reporting and scalability 7. Administration 8. Overall solution complexity © 2016 Forrester Research, Inc. Reproduction Prohibited 13

Forrester Wave™ evaluation: strategy 1. IMG strategy and vision 2. IMG implementation complexity 3. IMG pricing terms and flexibility 4. Customer satisfaction 5. IMG partner ecosystem © 2016 Forrester Research, Inc. Reproduction Prohibited 14

Forrester Wave™ evaluation: market presence 1. Development, sales, and technical support staffing 2. IMG customer installed base 3. Product line revenue 4. Global presence (verticals and geographies) © 2016 Forrester Research, Inc. Reproduction Prohibited 15

Provisioning and role management are table stakes › All vendors provide the following functionality features: • User account provisioning to a range of commercial onpremises and software-as-a-service (Saa. S) apps • Wizard to complete schema mapping between authoritative data sources, identity stores, and endpoints • Role visualization analysis (based on usage and patterns) • So. D checks to verify So. D violations on proposed access requests • Packaged and custom reports are available in interactive formats to allow for drilldown. © 2016 Forrester Research, Inc. Reproduction Prohibited 16

Forrester Wave™ evaluation: high-level results › Sail. Point, RSA, and Dell lead the pack. › CA Technologies, Courion, Micro Focus (Net. IQ), and Oracle offer competitive options. › IBM and SAP lag behind. © 2016 Forrester Research, Inc. Reproduction Prohibited 17

The Forrester Wave™: Identity Management And Governance, Q 2 2016 Source: The Forrester Wave™: Identity Management And Governance, Q 2 2016 Forrester report © 2016 Forrester Research, Inc. Reproduction Prohibited 18

Vendor profile: Sail. Point Strengths: › Depth of IMG functionality › Customer install base and broad partner ecosystem Weaknesses: › Global coverage © 2016 Forrester Research, Inc. Reproduction Prohibited 19

Vendor profile: RSA Strengths: › Administrative simplicity › GRC integration (RSA Archer) Weaknesses: › Uncertainty around IMG strategy with pending Dell/EMC merger © 2016 Forrester Research, Inc. Reproduction Prohibited 20

Vendor profile: Dell Strengths: › Pricing terms and flexibility › Global customer base and partner ecosystem Weaknesses: › Mobile app support for IMG functions © 2016 Forrester Research, Inc. Reproduction Prohibited 21

Vendor profile: Courion/Core Security Strengths: › Password management › North American healthcare penetration Weaknesses: › Support and service disruptions from 2015 restructuring © 2016 Forrester Research, Inc. Reproduction Prohibited 23

Vendor profile: Micro Focus/Net. IQ Strengths: › Strong directory integration capabilities › Installed base Weaknesses: › Slow-to-develop cloud strategy © 2016 Forrester Research, Inc. Reproduction Prohibited 24

Vendor profile: SAP Strengths: › Role management and So. D capabilities within SAP environment › Non-North American customer and revenue base Weaknesses: › Lengthy implementation times © 2016 Forrester Research, Inc. Reproduction Prohibited 27

A look ahead: vendors’ future plans › Prioritizing flexible and responsive user interfaces optimized for business users › Managing the identity life cycle for Saa. S environments › Delivering robust identity analytics to identify anomalous user behavior › Providing a risk-centric view of users, apps, and entitlements to mitigate identity risk © 2016 Forrester Research, Inc. Reproduction Prohibited 29

Ten commandments of modern identity management — thou shalt support: 1. A lot of endpoints: on-premises and cloud apps, and directories and SCIM 2. Customizable and flexible workflow 3. Mobile application for reviewers and requestors 4. Shopping cart in access request management 5. Access information-aided attestation 6. Bulk access reviews 7. Cloud (true multi-tenant) and on-premises delivery options 8. A slick user interface for business users and admins 9. Customer-facing IDM tasks out of the box 10. Ad hoc reporting and clickable dashboards › +1: Customers’ requirements © 2016 Forrester Research, Inc. Reproduction Prohibited 30

Forrester’s people and process recommendations for IMG › Seek cross-functional approval for your IMG business case. › Hammer out agreement on formal levels of risk. › Map tasks and channels to the formal levels of risk. › Use the Forrester IAM maturity assessment. © 2016 Forrester Research, Inc. Reproduction Prohibited 31

Thank you Merritt Maxim +1 617 -613 -6153 Twitter: @merrittmaxim forrester. com