Darran Rolls

At SailPoint, we pride ourselves on our industry-leading innovation, which has been recognized by analysts again and again. As a pure-play identity and access management vendor, we’re able to focus our time and effort on creating innovative solutions for the identity governance challenges our customers face. As a great proof point for our ongoing innovation & research, we’ve just been...

Cybersecurity topics like data breaches and encryption are hitting the headlines every day, so it’s no wonder that password security has become a hot topic in mainstream news. Recently CNBC tried to educate people about the importance of strong, unique passwords. Unfortunately, they missed the mark on execution by creating a site that collected and analyzed reader passwords. The bad...

It's funny how things change but they always remain the same. In security we've been talking about "the four As” for as long as I can remember. I was recently on a webinar with Jeremy Grant from the Chertoff group talking about the same topic - but this time if was 5 As. The essential extra A was Analysis. I...

I’m excited to report that the Simple Cloud Identity Management (SCIM) working group has unanimously approved the SCIM 1.0 specification. SailPoint contributed heavily to both the working group process and the development of the spec. With this week’s big move forward, I wanted to share my thoughts on why SCIM is good for our enterprise customers, cloud services providers, IdM...

In case you missed it, SailPoint recently announced a new provisioning solution based on identity governance. I believe this announcement not only signaled a fundamental change in approach from "old school" provisioning systems, but also sent a much needed life preserver to companies struggling with a provisioning quagmire. I know talk is cheap, so I want to provide a more...

The Yin and Yang of Governance for XACML I chuckled when I read Ian Glazer's blog post, "A Chronic Identity Pain." Ian referred to himself as "an old provisioning guy" - being a few years his senior, it made me think, "Does that make me an old-old provisioning guy?" :) Having said that, I do consider myself more of a...

These days I spend a lot of time on the road talking to customers, prospects, and business partners. I'm fortunate to spend time with some of the smartest people in the industry and hear about the kinds of projects that are still being funded in troubled times. Of all of things I hear, one theme rings out loud and clear...

In his recent Network World column, "The Regional, Cultural and National Differences of Identity Management," Dave Kearns discussed a panel he moderated at last week's European Identity Conference: On a panel called "Is there a difference between the European way of doing IAM/GRC and the rest of the world?" I was quickly informed that, in reality, it might better be...

I came to work this morning to read a Bloomberg article, "Goldman May Lose Millions From Ex-Worker's Code Theft," about a recent data breach. The details are still coming in, but allegedly a former computer programmer from Goldman Sachs, Sergey Aleynikov, downloaded and stole a copy of proprietary trading software. To me, this is an interesting data breach story. It...

Building on Mark's post from earlier this week, I want to add that I think the industry needs to get out of the mindset of thinking of "the business of identity" as an IT tools problem. For sure, provisioning has the potential to provide a consistent transactional "bus" for the identity change activity. But today's provisioning tools lack a governance...