Directory Services, Federation, and the Cloud’ Document

The document referenced in my prior posts about the Arcot and VMware acquisitions ( and is now published (subscription required). Here is the document description:

In this assessment, Research Director Mark Diodati evaluates the abilities of off-the-shelf directory services and federation technologies that solve the increasingly prevalent provisioning and authentication challenges for cloud-based applications. Product classes evaluated include virtual directories, synchronization servers, federation products, and cloud identity management products. Use cases include provisioning and authentication to SaaS applications, the use of a cloud-based identity store, hosted applications that require Windows Kerberos authentication, and mashup of on-premises and cloud identity data. Diodati also analyzes future requirements, including increased federation token types and deeper directory services integration with Extensible Access Control Markup Language (XACML).
Directory Services, Federation, and the Cloud

More Here