Andras Cser

VP, Principal Analyst

Forrester Bio

Author Insights

BLOG

Oracle Acquires Passlogix — A Signal That eSSO Is No Longer A Separate Market

Andras Cser October 5, 2010
In a rather unsurprising move, Oracle acquired its longtime OEM partner of eSSO solutions, Passlogix. The sale has closed after a relatively long courtship – the eSSO market has been consolidating for a long time: Novell’s OEM agreement with ActivIdentity, IBM’s acquisition of Encentuate all signal IAM stack consolidation. Beyond the obvious — 1) eSSO integration […]
Read More
BLOG

CA Acquires Arcot, VMWare Buys TriCipher

Andras Cser September 1, 2010
How  Authentication-as-a-Service becomes a part of leading IAM stacks and why virtualization is no longer a viable technology without identity and access management. CA’s acquisition of Arcot signals that partnering with an adaptive authentication vendor is no longer enough to offer a comprehensive access management strategy: you’d also have to have an adaptive authentication product […]
Read More
BLOG

Enterprise Role Management – New Podcast!

Andras Cser June 28, 2010
Last Monday, Stephanie Balaouras and I recorded a podcast on a recent hot topic amongst Forrester clients — Enterprise Role Management (ERM). For the most part, people understand fundamental provisioning so I wanted to take this time to go through ERM in a little more detail. Over the past few months, I have been asked many questions […]
Read More
BLOG

Cisco’s Path In Entitlement Management

Andras Cser June 13, 2008
While waiting for the pan-out of the Cisco System’s acquisition of Securent, I can’t help but wonder how Cisco is going to develop the Securent technology in its future products. Will the Securent policy engine (PDP) be used 1) as a main point for policy management and enforcement for network equipment, OR 2) will they […]
Read More
BLOG

Hitachi acquires M-Tech Information Technology

Andras Cser April 24, 2008
The number of pure-play vendors in user account provisioning decreased on April 7, 2008 when Hitachi announced that it acquired M-Tech Information Technology, and changed the name to Hitachi ID. Although Hitachi has been lacking an identity and access management (IAM) pedigree, this move can prove important due to the following reasons: 1) Using IAM […]
Read More
BLOG

IBM Acquires Encentuate

Andras Cser March 13, 2008
IBM acquired Encentuate for an undisclosed sum. This underscores the validity of Forrester’s prediction that the enterprise single sign-on (E-SSO) market in identity and access management (IAM) will grow from E-SSO’s $250 million in 2006 to $2 billion in 2014 – a CAGR of 28.5%. What are the likely implications of this acquisition in the […]
Read More
BLOG

Ping Identity acquires Sxip Access

Andras Cser March 11, 2008
Ping Identity announced that it acquired Sxip Access for an undisclosed sum. The rationale of the acquisition is to allow Ping Identity’s products to meet enterprise-wide, typically SSO challenges. This is important to be able to further extend Ping’s market share with software-as-a-service providers. Is it a breakthrough?  Hardly. Questions still remain as to how […]
Read More
BLOG

OpenID family grows – How it can transform Identity Federation between enteprises

Andras Cser February 7, 2008
With Google, IBM, Microsoft, VeriSign, and Yahoo! joining the OpenID Foundation, we may actually feel that something in federated access management is going to change. It is finally not the case of a vendor proposing a new standard – and adding to the cacophony of federation standards – but a set of moves towards a […]
Read More
BLOG

New Year’s Resolutions for choosing online retailers

Andras Cser December 20, 2007
With CardSpace and Higgins being in nascant and almost non-existent market adoption mode, you may wonder what authentication features you want to be looking for when shopping online. Usernames and passwords are a thing of the past: you can safely assume that you will use a computer to log in which has a keylogger or […]
Read More
BLOG

Sun acquires Vauu

Andras Cser November 14, 2007
Compliance requirements of large enterprise customers are too complex to satisfy with organically grown role management software. As a result, it appears that the role management acquisition storm is starting. With BridgeStream acquired by Oracle and now Vaau by Sun, enterprise role maintenance is finally coming of age and will be part of Sun’s Identity […]
Read More
BLOG

Cisco Acquires Securent – moving policy decisions to the network layer

Andras Cser November 1, 2007
The consolidation of the IAM market is not a new phenomenon and has been following the following pattern: a large software company with a follower IAM product set acquires a smaller IAM vendor with a proven track record to update the IAM product and services portfolio and to secure increased market presence. The acquisition of […]
Read More
BLOG

Role Management and eSSO vendors – a call for action

Andras Cser September 24, 2007
Part of a successful Identity Management (IdM) project is a successful role discovery and mapping phase. Many organizations — after having mapped and optimized their business processes — turn to role design and management solutions (VAUU RBACx, BHOLD, Oracle’s BridgeStream, and others). While these solutions give a great initial insight into the existing role structure, […]
Read More
BLOG

CIOs Entitlement Management Worries

Andras Cser July 23, 2007
While I was looking through current offerings in Entitlement Management (EM), I was struck with the questions that will likely be the next logical thoughts in the CIO’s mind after they are sold on the obvious ROI of an EM solution. Which organization should own the centralized Entitlement Management in the company? The first ideas […]
Read More