Abstract

Extemalizing authorization processing from business application s has been a goal for architects and developers for many years. Recent compliance demands for more granular access control and policy transparency have increased the urgency to adopt an architectural model where authorization and entitlement management arc consumed as a service rather than embedded within business applications. Major software vendors, such as Microsoft, Oracle, and SAP, are making significant steps to separate IdM functionality, including entitlement management from application logic. The market has also responded with a plethora of products that provide entitlement management and authorization functionality for commercial or custom-built application environment s. Final1y, the Extensible Access Control Markup Language (XACML) has emerged as the consensus authorization standard being supported by a growing number of IT and application vendors. Col1ectively, these forces form the basis of a nascent IdM market segment referred to as entitlement management.

This new entitlement management market continues to evolve over time as the industry 's understanding of capabilities matures and enterprise requirements expand. In this paper we will discuss several dynamics currently at play, review the product landscape, cover recent standards advancements, and mention some issues that early adopters are addressing.

Links

• https://link.springer.com/chapter/10.1007/978-3-8348-9363-5_11

• https://www.researchgate.net/publication/253257171_Entitlement_Management_Ready_to_Enter_the_IdM_Mainstream

Citation

Gebel, G., Wang, A., 2010. Entitlement Management: Ready to Enter the IdM Mainstream, in: Pohlmann, N., Reimer, H., Schneider, W. (Eds.), ISSE 2009 Securing Electronic Business Processes. Vieweg+Teubner, Wiesbaden, pp. 116–124. https://doi.org/10.1007/978-3-8348-9363-5_11