|By Kjell Backlund||
|October 10, 2012 12:16 PM EDT||
SAML is a protocol, a language. Languages are great for communicating, but a certain language is only useful when communicating with other speakers of the same language.
In business, the value of a language is dependent on how big a share of your current and potential customers speak it. Your choice of language(s) can greatly affect what kind of business you can expect: doing business only in Finnish limits your market to 5 Million people, whereas English lets you address more than a Billion people. You have three options:
- Limit your market to only those who speak your language of choice
- Learn to speak more languages to address a bigger market
- Try to teach more potential customers your language of choice
I have never heard of a successful example of the last alternative in business, have you?
How big a share of your customers "speaks" SAML?
I am not aware of any independent research on SAML adoption, but the largest number of customers I have seen a SAML vendor report is about 800 (written in August 2012), which is a good number for any vendor focused on a very specific area. However, if we presume that the market leader has 800 customers and a market share between 10 and 20 percent, that would lead lead to a conclusion that somewhere around 5000 organizations have invested in SAML solutions. How many of those are in production, and to what extent is another question.
About 5000 organizations, is that much or not? Single sign-on starts having a major impact on the usability of SaaS applications when there are more than a handful of users within an organization. For many common SaaS applications (for instance HR, CRM and document management) that requirement is already met by organizations with 100 employees. According to US Census Bureau (2008), there are more than 100 000 enterprises with 100+ employees in US alone, and the figure for EU is about the same according to Eurostat. Based on these figures, there must be at least 500 000 enterprises of that size in the world. Obviously 5000 organizations is only a fraction of the total number of organizations who would need single sign-on to achieve satisfactory usability for SaaS applications.
For you as a SaaS provider, this means that a very small share of your potential customers currently speak SAML, unless you are focusing on very specific segments where the adoption is higher.
Can you teach your customers to speak SAML?
Your options for teaching customers to speak SAML are:
- Reselling some commercial SAML product
- Offering a SAML Identity Provider on your own, for example based on some open source software
- Reselling or hooking up with some Authentication-as-a-Service offering
When you evaluate these options, the most important criteria are how they affect your business:
- your value proposal to your customers
- your revenue and time to recurring revenue
- your support costs
The core of the SaaS value proposal is simplicity. You tell your customers that you will run and maintain everything for them, and they only have to pay their bills. If you require your customer to get something else from somewhere else in order for your application to really work, then simplicity will suffer, both technically and business-wise.
Recurring revenue and loyalty is what SaaS is about. Your focus should be on engaging as many users as possible within each customer organization as soon as possible. The first hundred days is a well known time span for most people, from a newly elected American president to a new couple. If you or your customer spends that time installing and configuring some on-premise software to improve the usability of your SaaS application, then adoption and usage will suffer, which in the end means less revenue and more churn.
Some of your techies might tell you that they found this great piece of open source software, which they can develop into a SAML Identity Provider that you can give your customers for free. They are probably right. However, what about support? Is your core business to maintain free on-premise software? Do you have the resources and processes for it? Can your customers use your free SAML solution with other SaaS applications as well? Who will support that? Or should customers have one free SAML Identity Provider for each SaaS application?
From a business point of view, it obviously does not make sense for you as a SaaS vendor to try to teach your customers to speak SAML, and it is not very likely to succeed either, because it is usually the one with the money who calls the shots.
How can you offer business customers SaaS single sign-on?
First, let's have a look at what is really required. You need to know who the user is, which typically means information like:
- business unit
- access rights
Much of that information can be found in, or derived from, the user directory (AD, LDAP etc) of your customer organization. Your job is to get that information for a user who has authenticated against it, and transfer it to your application in a secure way. None of those steps involve rocket science. The trick is of course to do it in a way that requires as little deployment and maintenance work as possible, both from you and from your customers. That is essential to achieve rollout speed, high adoption and low support costs.
You need a solution which supports SAML for customers wanting to use that, and a more simple way for the rest. As said before, the core of the SaaS value proposal is simplicity. We have very good experience from using customers' existing intranet web servers to achieve similar functionality in a less complex way, a solution which practically any customer organization with 100 employees or more can roll out in hours If you want to read more about such a solution, click here.
You use an agile process; your goal is to make your organization more agile. But what about your data infrastructure? The truth is, today's databases are anything but agile - they are effectively static repositories that are cumbersome to work with, difficult to change, and cannot keep pace with application demands. Performance suffers as a result, and it takes far longer than it should to deliver new features and capabilities needed to make your organization competitive. As your application an...
May. 30, 2015 06:00 PM EDT Reads: 3,949
In her General Session at 15th Cloud Expo, Anne Plese, Senior Consultant, Cloud Product Marketing, at Verizon Enterprise, focused on finding the right mix of renting vs. buying Oracle capacity to scale to meet business demands, and offer validated Oracle database TCO models for Oracle development and testing environments. Anne Plese is a marketing and technology enthusiast/realist with over 19+ years in high tech. At Verizon Enterprise, she focuses on driving growth for the Verizon Cloud platfo...
May. 30, 2015 03:00 PM EDT Reads: 5,883
Software is eating the world. Companies that were not previously in the technology space now find themselves competing with Google and Amazon on speed of innovation. As the innovation cycle accelerates, companies must embrace rapid and constant change to both applications and their infrastructure, and find a way to deliver speed and agility of development without sacrificing reliability or efficiency of operations. In her Day 2 Keynote DevOps Summit, Victoria Livschitz, CEO of Qubell, discussed...
May. 30, 2015 02:00 PM EDT Reads: 5,974
SYS-CON Events announced today that MetraTech, now part of Ericsson, has been named “Silver Sponsor” of SYS-CON's 16th International Cloud Expo®, which will take place on June 9–11, 2015, at the Javits Center in New York, NY. Ericsson is the driving force behind the Networked Society- a world leader in communications infrastructure, software and services. Some 40% of the world’s mobile traffic runs through networks Ericsson has supplied, serving more than 2.5 billion subscribers.
May. 30, 2015 02:00 PM EDT Reads: 2,630
How does one bridge the gap between traditional enterprise storage infrastructures and the private, hybrid, and public cloud? In his session at 15th Cloud Expo, Dan Pollack, Chief Architect of Storage Operations at AOL Inc., examed the workload differences and required changes to reuse existing knowledge and components when building and using a cloud infrastructure. He also looked into the operational considerations, tool requirements, and behavioral changes required for private cloud storage s...
May. 30, 2015 02:00 PM EDT Reads: 3,286
The speed of product development has increased massively in the past 10 years. At the same time our formal secure development and SDL methodologies have fallen behind. This forces product developers to choose between rapid release times and security. In his session at DevOps Summit, Michael Murray, Director of Cyber Security Consulting and Assessment at GE Healthcare, examined the problems and presented some solutions for moving security into the DevOps lifecycle to ensure that we get fast AND ...
May. 30, 2015 02:00 PM EDT Reads: 5,292
Working with Big Data is challenging, especially when decision makers depend on market insights and intelligence from your data but don't have quick access to it or find it unusable. In their session at 6th Big Data Expo, Ian Khan, Global Strategic Positioning & Brand Manager at Solgenia; Zel Bianco, President, CEO and Co-Founder of Interactive Edge of Solgenia; and Ermanno Bonifazi, CEO & Founder at Solgenia, discussed how a revolutionary cloud-based BI along with mobile analytics is already c...
May. 30, 2015 01:00 PM EDT Reads: 5,825
Many people recognize DevOps as an enormous benefit – faster application deployment, automated toolchains, support of more granular updates, better cooperation across groups. However, less appreciated is the journey enterprise IT groups need to make to achieve this outcome. The plain fact is that established IT processes reflect a very different set of goals: stability, infrequent change, hands-on administration, and alignment with ITIL. So how does an enterprise IT organization implement change...
May. 30, 2015 01:00 PM EDT Reads: 1,782
Hardware will never be more valuable than on the day it hits your loading dock. Each day new servers are not deployed to production the business is losing money. While Moore's Law is typically cited to explain the exponential density growth of chips, a critical consequence of this is rapid depreciation of servers. The hardware for clustered systems (e.g., Hadoop, OpenStack) tends to be significant capital expenses. In his session at Big Data Expo, Mason Katz, CTO and co-founder of StackIQ, disc...
May. 30, 2015 12:30 PM EDT Reads: 5,811
There is no question that the cloud is where businesses want to host data. Until recently hypervisor virtualization was the most widely used method in cloud computing. Recently virtual containers have been gaining in popularity, and for good reason. In the debate between virtual machines and containers, the latter have been seen as the new kid on the block – and like other emerging technology have had some initial shortcomings. However, the container space has evolved drastically since coming on...
May. 30, 2015 12:15 PM EDT Reads: 2,542
T-Mobile has been transforming the wireless industry with its “Uncarrier” initiatives. Today as T-Mobile’s IT organization works to transform itself in a like manner, technical foundations built over the last couple of years are now key to their drive for more Agile delivery practices. In his session at DevOps Summit, Martin Krienke, Sr Development Manager at T-Mobile, will discuss where they started their Continuous Delivery journey, where they are today, and where they are going in an effort ...
May. 30, 2015 12:00 PM EDT Reads: 2,561
The 4th International Internet of @ThingsExpo, co-located with the 17th International Cloud Expo - to be held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA - announces that its Call for Papers is open. The Internet of Things (IoT) is the biggest idea since the creation of the Worldwide Web more than 20 years ago.
May. 30, 2015 12:00 PM EDT Reads: 2,768
Enterprises are fast realizing the importance of integrating SaaS/Cloud applications, API and on-premises data and processes, to unleash hidden value. This webinar explores how managers can use a Microservice-centric approach to aggressively tackle the unexpected new integration challenges posed by proliferation of cloud, mobile, social and big data projects. Industry analyst and SOA expert Jason Bloomberg will strip away the hype from microservices, and clearly identify their advantages and d...
May. 30, 2015 11:00 AM EDT Reads: 2,837
SYS-CON Events announced today that SUSE, a pioneer in open source software, will exhibit at SYS-CON's DevOps Summit 2015 New York, which will take place June 9-11, 2015, at the Javits Center in New York City, NY. SUSE provides reliable, interoperable Linux, cloud infrastructure and storage solutions that give enterprises greater control and flexibility. More than 20 years of engineering excellence, exceptional service and an unrivaled partner ecosystem power the products and support that help ...
May. 30, 2015 11:00 AM EDT Reads: 1,442
Python is really a language which has swept the scene in recent years in terms of popularity, elegance, and functionality. Research shows that 8 out 10 computer science departments in the U.S. now teach their introductory courses with Python, surpassing Java. Top-ranked CS departments at MIT and UC Berkeley have switched their introductory courses to Python. And the top three MOOC providers (edX, Coursera, and Udacity) all offer introductory programming courses in Python. Not to mention, Python ...
May. 30, 2015 11:00 AM EDT Reads: 1,983
SYS-CON Events announced today that O'Reilly Media has been named “Media Sponsor” of SYS-CON's 16th International Cloud Expo®, which will take place on June 9–11, 2015, at the Javits Center in New York City, NY. O'Reilly Media spreads the knowledge of innovators through its books, online services, magazines, and conferences. Since 1978, O'Reilly Media has been a chronicler and catalyst of cutting-edge development, homing in on the technology trends that really matter and spurring their adoption...
May. 30, 2015 10:30 AM EDT Reads: 1,566
"People are a lot more knowledgeable about APIs now. There are two types of people who work with APIs - IT people who want to use APIs for something internal and the product managers who want to do something outside APIs for people to connect to them," explained Roberto Medrano, Executive Vice President at SOA Software, in this SYS-CON.tv interview at Cloud Expo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
May. 30, 2015 10:30 AM EDT Reads: 4,939
Bill Doerrfeld at Nordic APIs has written today about how APIs are evolving the B2B landscape. This is a particularly interesting article for me, because my personal background is working for an EDI provider, where I linked EDI processes from the private network to the Internet, over 15 years ago. Vordel was founded to allow new Web Services APIs to be used for B2B. Axway, a B2B software company, acquired Vordel in 2012 to link B2B with Web APIs. This caused a domino effect, with other API Manag...
May. 30, 2015 10:15 AM EDT Reads: 1,111
I read an insightful article this morning from Bernard Golden on DZone discussing the DevOps conundrum facing many enterprises today – is it better to build your own DevOps tools or go commercial? For Golden, the question arose from his observations at a number of DevOps Days events he has attended, where typically the audience is composed of startup professionals: “I have to say, though, that a typical feature of most presentations is a recitation of the various open source products and compo...
May. 30, 2015 10:00 AM EDT Reads: 1,771
The 5th International DevOps Summit, co-located with 17th International Cloud Expo – being held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA – announces that its Call for Papers is open. Born out of proven success in agile development, cloud computing, and process automation, DevOps is a macro trend you cannot afford to miss. From showcase success stories from early adopters and web-scale businesses, DevOps is expanding to organizations of all sizes, including the...
May. 30, 2015 10:00 AM EDT Reads: 4,931