Welcome!

Microservices Expo Authors: Liz McMillan, Elizabeth White, Carmen Gonzalez, Pat Romanski, Yeshim Deniz

Related Topics: @CloudExpo, Microservices Expo, Cloud Security

@CloudExpo: Article

Is SAML All You Need to Offer Business Customers SaaS Single Sign-on?

How many customers can you serve with it?

No.

SAML is a protocol, a language. Languages are great for communicating, but a certain language is only useful when communicating with other speakers of the same language.

In business, the value of a language is dependent on how big a share of your current and potential customers speak it. Your choice of language(s) can greatly affect what kind of business you can expect: doing business only in Finnish limits your market to 5 Million people, whereas English lets you address more than a Billion people. You have three options:

  1. Limit your market to only those who speak your language of choice
  2. Learn to speak more languages to address a bigger market
  3. Try to teach more potential customers your language of choice

I have never heard of a successful example of the last alternative in business, have you?

How big a share of your customers "speaks" SAML?
I am not aware of any independent research on SAML adoption, but the largest number of customers I have seen a SAML vendor report is about 800 (written in August 2012), which is a good number for any vendor focused on a very specific area. However, if we presume that the market leader has 800 customers and a market share between 10 and 20 percent, that would lead lead to a conclusion that somewhere around 5000 organizations have invested in SAML solutions. How many of those are in production, and to what extent is another question.

About 5000 organizations, is that much or not? Single sign-on starts having a major impact on the usability of SaaS applications when there are more than a handful of users within an organization. For many common SaaS applications (for instance HR, CRM and document management) that requirement is already met by organizations with 100 employees. According to US Census Bureau (2008), there are more than 100 000 enterprises with 100+ employees in US alone, and the figure for EU is about the same according to Eurostat. Based on these figures, there must be at least 500 000 enterprises of that size in the world. Obviously 5000 organizations is only a fraction of the total number of organizations who would need single sign-on to achieve satisfactory usability for SaaS applications.

For you as a SaaS provider, this means that a very small share of your potential customers currently speak SAML, unless you are focusing on very specific segments where the adoption is higher.

Can you teach your customers to speak SAML?
Your options for teaching customers to speak SAML are:

  1. Reselling some commercial SAML product
  2. Offering a SAML Identity Provider on your own, for example based on some open source software
  3. Reselling or hooking up with some Authentication-as-a-Service offering

When you evaluate these options, the most important criteria are how they affect your business:

  • your value proposal to your customers
  • your revenue and time to recurring revenue
  • your support costs

The core of the SaaS value proposal is simplicity. You tell your customers that you will run and maintain everything for them, and they only have to pay their bills. If you require your customer to get something else from somewhere else in order for your application to really work, then simplicity will suffer, both technically and business-wise.

Recurring revenue and loyalty is what SaaS is about. Your focus should be on engaging as many users as possible within each customer organization as soon as possible. The first hundred days is a well known time span for most people, from a newly elected American president to a new couple. If you or your customer spends that time installing and configuring some on-premise software to improve the usability of your SaaS application, then adoption and usage will suffer, which in the end means less revenue and more churn.

Some of your techies might tell you that they found this great piece of open source software, which they can develop into a SAML Identity Provider that you can give your customers for free. They are probably right. However, what about support? Is your core business to maintain free on-premise software? Do you have the resources and processes for it? Can your customers use your free SAML solution with other SaaS applications as well? Who will support that? Or should customers have one free SAML Identity Provider for each SaaS application?

From a business point of view, it obviously does not make sense for you as a SaaS vendor to try to teach your customers to speak SAML, and it is not very likely to succeed either, because it is usually the one with the money who calls the shots.

How can you offer business customers SaaS single sign-on?
First, let's have a look at what is really required. You need to know who the user is, which typically means information like:

  • name
  • organization
  • business unit
  • access rights
  • email
  • phone

Much of that information can be found in, or derived from, the user directory (AD, LDAP etc) of your customer organization. Your job is to get that information for a user who has authenticated against it, and transfer it to your application in a secure way. None of those steps involve rocket science. The trick is of course to do it in a way that requires as little deployment and maintenance work as possible, both from you and from your customers. That is essential to achieve rollout speed, high adoption and low support costs.

You  need a solution which supports SAML for customers wanting to use that, and a more simple way for the rest. As said before, the core of the SaaS value proposal is simplicity.  We have very good experience from using customers' existing intranet web servers to achieve similar functionality in a less complex way, a solution which practically any customer organization with 100 employees or more can roll out in hours  If you want to read more about such a solution, click here.

More Stories By Kjell Backlund

Kjell Backlund, CEO of Emillion, is a seasoned software business entrepreneur with over 20 years experience in international business. He founded Emillion in 2001, with the vision that automating sign-on and user management would be essential to the success of SaaS and Service Desk applications(www.emillion.biz).

@MicroservicesExpo Stories
When people aren’t talking about VMs and containers, they’re talking about serverless architecture. Serverless is about no maintenance. It means you are not worried about low-level infrastructural and operational details. An event-driven serverless platform is a great use case for IoT. In his session at @ThingsExpo, Animesh Singh, an STSM and Lead for IBM Cloud Platform and Infrastructure, will detail how to build a distributed serverless, polyglot, microservices framework using open source tec...
More and more companies are looking to microservices as an architectural pattern for breaking apart applications into more manageable pieces so that agile teams can deliver new features quicker and more effectively. What this pattern has done more than anything to date is spark organizational transformations, setting the foundation for future application development. In practice, however, there are a number of considerations to make that go beyond simply “build, ship, and run,” which changes ho...
Gartner is now treating algorithms like they are some kind of innovative addition to the modern digital discussion. Presumably the brilliant minds there have some novel insight into algorithms and, yes, the Algorithm Economy that CIOs should sit up and take notice of. Not only are algorithms nothing new, but much of what Gartner is saying about them is obvious. The bigger picture here is that software continues to improve, and enterprises are becoming increasingly software-driven, in part bec...
The Internet of Things is clearly many things: data collection and analytics, wearables, Smart Grids and Smart Cities, the Industrial Internet, and more. Cool platforms like Arduino, Raspberry Pi, Intel's Galileo and Edison, and a diverse world of sensors are making the IoT a great toy box for developers in all these areas. In this Power Panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists discussed what things are the most important, which will have the most profound...
The Internet of Things (IoT) is growing rapidly by extending current technologies, products and networks. By 2020, Cisco estimates there will be 50 billion connected devices. Gartner has forecast revenues of over $300 billion, just to IoT suppliers. Now is the time to figure out how you’ll make money – not just create innovative products. With hundreds of new products and companies jumping into the IoT fray every month, there’s no shortage of innovation. Despite this, McKinsey/VisionMobile data...
NHK, Japan Broadcasting, will feature the upcoming @ThingsExpo Silicon Valley in a special 'Internet of Things' and smart technology documentary that will be filmed on the expo floor between November 3 to 5, 2015, in Santa Clara. NHK is the sole public TV network in Japan equivalent to the BBC in the UK and the largest in Asia with many award-winning science and technology programs. Japanese TV is producing a documentary about IoT and Smart technology and will be covering @ThingsExpo Silicon Val...
SYS-CON Events announced today that Men & Mice, the leading global provider of DNS, DHCP and IP address management overlay solutions, will exhibit at SYS-CON's 18th International Cloud Expo®, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. The Men & Mice Suite overlay solution is already known for its powerful application in heterogeneous operating environments, enabling enterprises to scale without fuss. Building on a solid range of diverse platform support,...
Internet of @ThingsExpo, taking place June 7-9, 2016 at Javits Center, New York City and Nov 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with the 18th International @CloudExpo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world and ThingsExpo New York Call for Papers is now open.
SYS-CON Events announced today that Catchpoint Systems, Inc., a provider of innovative web and infrastructure monitoring solutions, has been named “Silver Sponsor” of SYS-CON's DevOps Summit at 18th Cloud Expo New York, which will take place June 7-9, 2016, at the Javits Center in New York City, NY. Catchpoint is a leading Digital Performance Analytics company that provides unparalleled insight into customer-critical services to help consistently deliver an amazing customer experience. Designed...
@DevOpsSummit taking place June 7-9, 2016 at Javits Center, New York City, and Nov 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with the 18th International @CloudExpo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world.
Cloud Expo, Inc. has announced today that Andi Mann returns to 'DevOps at Cloud Expo 2016' as Conference Chair The @DevOpsSummit at Cloud Expo will take place on June 7-9, 2016, at the Javits Center in New York City, New York. "DevOps is set to be one of the most profound disruptions to hit IT in decades," said Andi Mann. "It is a natural extension of cloud computing, and I have seen both firsthand and in independent research the fantastic results DevOps delivers. So I am excited to help the g...
Korean Broadcasting System (KBS) will feature the upcoming 18th Cloud Expo | @ThingsExpo in a New York news documentary about the "New IT for the Future." The documentary will cover how big companies are transmitting or adopting the new IT for the future and will be filmed on the expo floor between June 7-June 9, 2016, at the Javits Center in New York City, New York. KBS has long been a leader in the development of the broadcasting culture of Korea. As the key public service broadcaster of Korea...
SYS-CON Events announced today that Addteq will exhibit at SYS-CON's @DevOpsSummit at Cloud Expo New York, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. Addteq is one of the top 10 Platinum Atlassian Experts who specialize in DevOps, custom and continuous integration, automation, plugin development, and consulting for midsize and global firms. Addteq firmly believes that automation is essential for successful software releases. Addteq centers its products a...
In the rush to compete in the digital age, a successful digital transformation is essential, but many organizations are setting themselves up for failure. There’s a common misconception that the process is just about technology, but it’s not. It’s about your business. It shouldn’t be treated as an isolated IT project; it should be driven by business needs with the committed involvement of a range of stakeholders.
SYS-CON Events announced today that FalconStor Software® Inc., a 15-year innovator of software-defined storage solutions, will exhibit at SYS-CON's 18th International Cloud Expo®, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. FalconStor Software®, Inc. (NASDAQ: FALC) is a leading software-defined storage company offering a converged, hardware-agnostic, software-defined storage and data services platform. Its flagship solution FreeStor®, utilizes a horizonta...
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo 2016 in New York and Silicon Valley. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place Nov 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA, is co-located with 17th Cloud Expo and will feature technical sessions from a rock star conference faculty ...
SYS-CON Events announced today that Column Technologies will exhibit at SYS-CON's @DevOpsSummit at Cloud Expo, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. Established in 1998, Column Technologies is a global technology solutions provider with over 400 employees, headquartered in the United States with offices in Canada, India, and the United Kingdom. Column Technologies provides “Best of Breed” technology solutions that automate the key DevOps principal...
SYS-CON Events announced today that SoftLayer, an IBM Company, has been named “Gold Sponsor” of SYS-CON's 18th Cloud Expo, which will take place on June 7-9, 2016, at the Javits Center in New York, New York. SoftLayer, an IBM Company, provides cloud infrastructure as a service from a growing number of data centers and network points of presence around the world. SoftLayer’s customers range from Web startups to global enterprises.
SYS-CON Events announced today that IBM Cloud Data Services has been named “Bronze Sponsor” of SYS-CON's 18th Cloud Expo, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. IBM Cloud Data Services offers a portfolio of integrated, best-of-breed cloud data services for developers focused on mobile computing and analytics use cases.
SYS-CON Events announced today that Anexia will exhibit at SYS-CON's 18th International Cloud Expo®, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. Anexia offers high-quality customized managed hosting solutions for SaaS and IaaS companies. The company was founded in 2006 in Klagenfurt, Austria. Today, it has additional offices in Vienna, Graz, Munich, Cologne and New York City to serve numerous international customers.