Magic Quadrant for User Provisioning Gartner RAS Core Research Note G00171056, Perry Carpenter, Earl Perkins, 6 September 2009, RA4 10152010 User provisioning delivers the ability to manage identities across systems, applications and resources. Economic conditions stress efficiency as the main driver, but compliance remains crucial. Identity and access management intelligence and role life cycle management are increasingly top of mind. WHAT YOU NEED TO KNOW User-provisioning solutions are maturing in function and capability. The provisioning market continues to consolidate, and boundaries between identity and access management (IAM) companion products are blurring. Core provisioning functionality (i.e., workflow engines, approval processes, password management and “standard†connector sets) is similar across most vendors. Provisioning vendors seek to find relevant means of differentiating their product sets from competitors through features such as: • Role life cycle management • More and better workflow options to enable business process management (BPM) and general governance, risk and compliance (GRC) needs • Improved IAM intelligence (i.e., audit, analytics, monitoring, reporting) • Better integration with security information and event management (SIEM), data loss prevention (DLP), and IT GRC management (GRCM) tools Large-scale user-provisioning projects remain complex initiatives, and require experienced integrators and skilled project management on the part of the enterprise. With relative functional parity evident in the software, most provisioning implementations succeed or fail based on these integrators, and on the relationship between customers and vendors. Success rates for complex and/or major user-provisioning initiatives are improving, but still plagued by first-generation “horror stories†and poorly integrated replacements. Customers should consider key differentiators when selecting user-provisioning solutions that include, but are not limited to: 2 • Price, including flexibility of pricing for deployment, maintenance and support programs • Global scope, depth, availability, and extent of partnerships with consultants and system integrators to deliver the solution • Consulting and integrator performance, which remains vital to success • Delivery time of projects that match the business plan • The ability to deliver subsidiary services that are not available in the core product through: • Integrating component IAM features (e.g., common user experience, reporting) • Custom development • Augmentation via partnerships or adjacent products or capabilities (for example, role life cycle management, entitlement management, federated provisioning or IAM intelligence) • The level and extent of experience of Mentions: Accenture, Acquire, ACS, Approva, Atos, Avatier, Aveksa, BEA, Beta Systems, BMC, CA, California, Centrify, Citrix, Clarity, CompuCom Systems, Courion, CSC, Dell, Deloitte, Eclipse, EDS, Eurekify, Evidian, Fischer, Fujitsu, Good, Hitachi, HP, IBM, Imanami, Imprivata, Innovative, Insight, KPMG, Logica, Magic, Microsoft, Novell, Omada, Oracle, Persistent, PricewaterhouseCoopers, Proginet, RSA, SAM, SAP, Security, Sentillion, Service Management, Siemens, Sun, System, TCS, test, T-Systems, Vaau, Wipro Free Download of Full Report Topics: Competitive Analysis, Market Research, Competitive Strategy, Market Intelligence