During 2017, identity providers became central to enterprise security strategies as organizations sought scalable, cloud-first access controls across hybrid applications.
The landscape featured specialized platforms focused on federation, privileged account management, and adaptive risk-based authentication.
| Vendor | Primary Focus | Deployment Model | Notable Strength |
|---|---|---|---|
| Okta | Cloud identity and SSO | SaaS multi-tenant | Extensive app catalog and API-first management |
| Microsoft Azure AD | Enterprise hybrid identity | Hybrid and cloud | Deep integration with Office 365 and Azure |
| Ping Identity | High-assurance access | On-prem and cloud | Passwordless and strong authentication options |
| ForgeRock | On-prem and cloud | Open standards and customizable workflows |
Core Identity Provider Capabilities in 2017
Federation and Standards Support
Providers emphasized SAML 2.0, OAuth 2.0, and OpenID Connect to ensure interoperability with cloud and on-prem applications.
Privileged Account and Lifecycle Management
Tools for managing admin accounts, just-in-time access, and automated onboarding/offboarding reduced operational risk.
Security and Adaptive Access Controls
Risk-Based Authentication
Contextual signals such as device health, location, and behavior triggered step-up authentication and automated access decisions.
Integration with Security Ecosystems
Tight coupling with SIEM, threat intelligence, and endpoint security platforms enabled faster detection and response to suspicious activity.
Market Adoption and Deployment Trends
By 2017, multi-cloud strategies drove demand for identity platforms that could consistently govern access across AWS, Azure, and Google Cloud.
Organizations favored solutions with strong developer portals, self-service onboarding, and granular reporting for compliance requirements.
Strategic Roadmap for Identity in 2017 and Beyond
- Map all enterprise applications and classify them by sensitivity and compliance requirements.
- Choose a federation model that aligns with cloud adoption while preserving necessary on-prem integrations.
- Implement standardized protocols like SAML, OAuth, and OpenID Connect across all external services.
- Enable risk-based policies tied to device posture, location, and behavioral analytics.
- Establish centralized audit and reporting to streamline evidence collection for regulators and auditors.
FAQ
Reader questions
How does federation improve security in 2017 identity deployments?
Federation reduces password sprawl by enabling single sign-on across systems, which lowers the risk of credential theft and simplifies revocation when employees or contractors change roles.
What are the main differences between cloud and on-prem identity architectures?
Cloud-first architectures favor SaaS directories and API-driven operations, while on-prem setups rely more on Active Directory integrations, hardware security modules, and strict data residency controls.
Which protocols are essential for modern identity providers?
SAML 2.0, OAuth 2.0, and OpenID Connect form the core protocol set, enabling interoperability with SaaS apps, mobile clients, and APIs while supporting modern security tokens and scopes.
How do adaptive access controls affect user experience?
Adaptive access aims to balance security and usability by applying low-friction paths for low-risk logins and step-up challenges when anomalies such as impossible travel or new devices are detected.