Why CA Supports the Kantara Initiative

Over the past year or so, I have been CA's representative involved in the structuring and birth of the Kantara Initiative.

Over the past year or so, I have been CA’s representative involved in the structuring and birth of the Kantara Initiative.  Now that the Kantara Initative is officially launched, I thought it made sense to blog about why CA believes the creation of the Kantara Initiative is so important.  In no particular order, here are my thoughts on “why Kantara.”



  • The challenges around identity go beyond just technology. Over the years the industry has done a pretty good job inventing technologies and establishing standards to address identity challenges (too well really), only to discover that the real challenges to identity and security on the Internet are around softer issues like privacy and trust. The Kantara Initiative will focus on this in a way that is neutral to the underlying technologies.

  • Along the same lines, to date technologists have invented many technologies/standards that are at least somewhat overlapping and certainly not interoperable (example SAML, Information Cards, OpenID) which complicates matters for both deploying organizations and end-users. The Kantara Initiative will focus on this. The identity community cannot afford to create new, incompatible silos of identity on the Internet.

  • Certification of interoperability of vendor implementations is critical to eased deployments in the real world. Inventing new technologies/standards without sustained vendor certification testing is a recipe for slow and painful adoption. The Kantara Initiative will focus on this.

  • Creating and promoting identity technologies and best practices is a global challenge and opportunity. Technology invention is only part of what is needed for adoption. Thus the Kantara Initiative will focus on both bringing the global community in on the debate as well as be the focus of the related communication and promotion.

  • Combining open participation with a serious and well-funded organization is unique. Traditionally you could have one or the other of these, but not both. We have typically seen many organizations where “all are welcome,” but it is hard to get things done since everyone is a volunteer with day jobs. Or organizations which are well-funded but are correspondingly exclusive based on the need to pay – so that staff and expert consultants can be hired. The Kantara Initiative is covering both bases partially based on its unique bicameral governance model.

I will certainly blog more about the Kantara Initiative as it develops and starts making an impact, but if any of these points hit home for you, please consider participating and/or joining the Kantara Initative yourself.

Written by

Matthew Gardiner

Published in

View this topic
  • James Holland

    This is great. Hooray for Disney’s imagineers!

  • http://www.sheistocktips.com/ SHRISTOCKTIPS

    SHRISTOCKTIPS has
    become a new brand in the share market research with its accurate research. Proven
    itself always right whether market is bull or bear. Last week all paid clients
    booked handsome profit in NIFTY, BANKINIFTY & STOCKS. Now for the coming
    week we expect more correction can come in NIFTY as the IRAQ issue is getting
    more tense, If it happens more then you will see a sharp fall in all world marketNSE BSE, STOCK TIPSbecause as we know all world run on
    crude & most of the crude comes from IRAQ. So be ready for a sharp fall so
    sell will be the best strategy for next week also. Traders can make a sell
    position in NIFTY around 7600-7650 with stoploss 7750 for the target of
    7300-7200.One can also make a sell call NIFTY 50 stocks as per NIFTY levels. You
    can also take our two days free trial to check our accuracy. For further updates
    you can visit our website. http://goo.gl/sMgZ7n

    Regards

    SHRISTOCKTIPS TEAM

  • king lear

    testing comment functionality, please do not publish this

  • http://www.rachelmacik.com Rachel Macik

    Love the personal pic :)

    • CAHighlight

      Thank you!

  • Plutora Inc

    This is a good case study. 2.3 sec’s off a login transaction is big.

  • http://www.linkedin.com/in/michelehudnall Michele Hudnall

    While the analysts were hyping DevOps, I posted the oversight of not including security as part of that discussion as you are highlighting here. Instead of just talking DevOps, it should be DOS (what’s old is new again :-) – DevOpsSec. As a previous AppDev person, it’s the app, who’s using it, why and where rather than the device and having the service available.

    As you rightly point, out Security should be baked into the solution.
    https://www.netiq.com/communities/data-center-solutions/accelerating_business_overhauling_service_management/

    Nice Post and Timely!

    @HudnallsHuddle

    • CAHighlight

      Thank you for your feedback Michele. Agreed – security cannot be overlooked. Appreciate your input!

  • Mitesh

    I would love a printed copy

  • Lars Johansson

    I love the idea of BYOID! This makes me choose if I am almost anonymous (with my Hotmail Nicname) or official with identity from an official organisation. My Identity Provider will attach identity with right level of LoA according to the need of the Service provider.

    • CAHighlight

      Thank you for your comment. BYOID has tangible benefits for end users and relying parties but it also has to be weighed in the balance with potential risks and liability concerns. It will be interesting to see how BYOID plays out in the enterprise.