Johannes Ernst’s Blog

The Problems of Explaining User-Centric Identity

For the User-Centric Identity Track that I’ve been putting together for the European Identity Conference this Thursday, I decided we really needed a reasonably compehensive introduction into the topic first, before we go into the experience reports, and the big panel. But boy, did that "introduction to…" presentation turn out to be hard; it was much harder and more time-consuming to create than I had thought.

First, I looked around for presentations that others already have made on the subject. I found lots that explain how gory protocol XYZ works, and lots that say "wouldn’t be nice if we could simply do ABC instead of DEF?" or why empowerment is (perhaps morally?) important. That clearly includes some of my own… which wouldn’t have been bad if it hadn’t ended there.

But I came up totally empty when looking for presentations that make the case "this is why my business should do it" for reasons such as reasons that businesses do things for, such as making money. The kind of presentation you can take into a management meeting, and you will not only still have a job afterwards, but have your user-centric identity project funded instead.

So instead of attempting to recruit a speaker for that slot in the track, I decided to do it myself. After all, how hard can it be? Well, that’s where the "boy, was I wrong" above comes from. It took me at least 3 times longer than I thought, and all that my presentation now needs is about a year or two of refinements to turn it into a good presentation. And only part of me is joking.

Why? Because we all in user-centric identity land, and I’m including myself very much that group, have not made our case at all in a manner that makes any business sense. That was not clear to me before; the bits and pieces that we do have do not a winnable case make.

I know I’m going to offend some people by saying this out loud. Truth be told, I’m a bit offended myself (which is doubly offensive …) I’m not saying this to be critical (if so, I’d be criticizing myself first) but as a call to action: if we ever want this market to be a market — one where real value is created, some of which is measured in real dollars and euros that exchange hands for value delivered — we gotta fix that as quickly as possible.

Let me make a litany of things that we all keep repeating like a mantra, but that don’t work to make a case, and in fact likely do the opposite:

  • "User-centric identity is so obviously the right approach that if you, dear audience (boss, budget manager, marketing strategist, customer) don’t immediately get it, you are very obviously a moron."
  • "The age of silos is dead, get on with the program."
  • "Users will spend huge amounts of resources (money, but in particular time and cumbersomeness) on privacy"
  • "We don’t need to do market segmentation and follow a clear segment roadmap, and understand the exact needs profile of all of our stakeholders in one segment at a time, addressing them one segment at a time, because user-centric identity is a horizontal market that will magically flip overnight." I have this T-shirt with the complicated math formulas scribbled on a blackboard, where somewhere in the middle is says "and here a miracle occurs". Just like that.

There are more.

Having spent too many days back home on these slides, and too many hours on the flight to Munich on the that I probably should better have spent sleeping, I had to get this off my chest.

Now, what I have for Thursday, modestly called "The Technology and Business of User-Centric Identity", is what came out at the other end of this process. I’m the first to acknowledge that the presentation has many flaws, including that it is far too long-winded in making its core points effectively, and the core points themselves are not as memorable by a long shot that I would have liked to make them. But making a start, even a buggy one, is better than not to, and I hope you (and my audience on Thursday) will forgive me. And collaborate with me to make the case better, which should help all of us.

I will put the slides on-line as soon as the talk has been given, and I hope to receive some constructive feedback because we really do need to get our house in order in user-centric identity land. It’s time to stop the "and then a miracle occurs" strategy to adoption, because it ain’t one. If we drill down into the real facts behind adoption so far, instead of the inflated numbers and hype, I think that’s the best argument that I can make for needing to get our stuff together.

OpenID Wins Webware100 Again

Like last year, OpenID has won the Webware award, in the "utility" category.

They write:

OpenID was created to solve one of the Web’s biggest annoyances: log-ins. You’ve already got a verified identity on one site, so why do you need one for every place you visit? With OpenID, site owners can simply built it into their Web apps and services, letting you use your verified credentials from one site in place of having to sign up for yet another log-in.

The hope of OpenID is that it becomes a standard and universal system across every site, letting new sites spring up and have users more comfortable with signing up with less hassle. As of right now, there are nearly 10,000 sites that support OpenID, and many large and popular companies are adding OpenID as an option for new user registration.

Moderating the User-Centric Identity Track at the 2nd European Identity Conference

The nice folks at Kuppinger & Cole, organizers of the highly successful European Identity Conference, have graciously invited me to put together the track on user-centric identity at their second conference next week.

With now hundreds of millions of OpenIDs available in the market from major providers, CardSpace shipping with all copies of Windows Vista, and the first slate of non-Windows identity selectors appearing from name-brand vendors, user-centric identity is now clearly the red-hot topic for identity and security in 2008 and 2009.

I’m even more fortunate to have a first-rate cast of speakers join me for this track:

  • George Fletcher, Chief Architect at AOL, will speak about AOL’s OpenID implementation that has provided OpenID identities to all of AOL’s users since last year.
  • Helmer Wieringa, Technology Officer at Reed Business (the largest division in Reed-Elsevier, a major media and conference company), will make the case why publishers such as Reed only have to gain from migrating old username/password schemes to universal usernames and no passwords.
  • Kim Cameron, Chief Architect for Identity at Microsoft (responsible for Windows CardSpace), Ariel Gordon, Director of Identity Management at France Telecom / Orange (responsible for Orange’s offering of OpenIDs to all of their broadband subscribers), Dale Olds, Novell Distinguished Engineer (developing the Digital Me identity selector on Linux and the Mac through the Higgins and Bandit open-source projects), Thomas Huhn (OpenID entrepreneur in Germany) and Snorri Giorgetti (OpenID Foundation’s representative in Europe) will join George, Helmer and me on an interactive panel to discuss the business case for user-centric identity and the unfolding competitive dynamics of adopters and their competitors.

I will start the track with an introduction into the technologies, projects and business cases for user-centric identity to give attendees a solid footing in what user-centric identity is all about, who is who, and why it matters to individuals and businesses alike.

My goal with the track is not only to educate identity and security professionals on the rapidly changing identity landscape by providing a representative set of views from leaders in the movement, but also to give you the ammunition with which you can make the case in your companies that user-centricity is here to stay, and that companies that get ahead of the curve have a number of unique business opportunities in front of them.

You can find more information about the conference here: www.id-conf.com/eic2008. Hope to see you there! If it is like last year’s, it will very likely be worth your while.

Next week at RSA

Wow! A long way from back then.

[logos]

Thanks to Charles for putting the banner together this time around. Amazingly, my layout from an early OSIS presentation at an IIW keeps surviving!

Health 2.0 Conference in October

As an advisory board member, I better post this. While all conference announcements are hyped, this one actually is truer than most ;-) and I’m very confident that it would we worth your time to come if you are interested in Health 2.0.

If you missed Health 2.0 San Diego last month or last year’s sold-out Health 2.0 User-Generated Healthcare in San Francisco, here’s your chance. Early bird passes for Health 2.0 San Francisco are now on sale. Buy your passes now and you’ll save significantly over our regular conference rates. Only 150 will be made available at this rate, so if you’re seriously considering coming you probably should act now to secure a spot. We’ll be at the Marriott San Francisco downtown. The event will kick off on the evening of October 21st and run through the evening of the 23rd.

We’re expecting an even larger crowd than last September - around a thousand - so Health 2.0 San Francisco 2008 promises to be the place to be if you’re involved in this space, an investor or looking to connect with industry insiders. You’ll get the low down on new Web 2.0 technologies like social networking, blogs, podcasts and specialized search as well as an overview of new healthcare and wellness tools and services. Speakers will include leaders from Google, Microsoft, WebMD, Sermo, Daily Strength, Patients Like Me, Organized Wisdom and many more.

UPDATE: If you’re interested in participating at Health 2.0 as a speaker or panelist, you’ll find the application here. Start-ups and starving academics can register to be considered for the limited block of discounted passes we are making available. Bloggers and members of the news media can email us to apply to be added to the media list. For details on sponsorships and exhibitor opportunities, email sponsor relations guru John Pluenneke at john@health2con.com.

Here’s just a quick rundown of what you will see:

Plenary

  • Keynote: The Future of Health 2.0
  • Consumer Aggregators
  • Specialized vertical search
  • Consumer Tools
  • Social Networks in Healthcare
  • International Health 2.0
  • Business Models in Health 2.0
  • Investment trends in Health 2.0

Breakout Sessions

  • Wellness 2.0
  • Health 2.0 in Pharma and Pharmacy
  • Health Plans 2.0
  • Health 2.0 in Disease Management
  • Virtual Visits and New Delivery Models
  • Specialized vertical search: a deeper look
  • Patient Social Networks
  • Clinician Social Networks
  • Provider Search and Rating
  • Online Identity and Privacy
  • Money & Administration in Health 2.0
  • Consumer Genomics
  • Open Source in Health 2.0
  • Wikis & Collaborative Platforms
  • Content, Navigation & Advocacy

Special Sessions

  • In conversation with 3 Health 2.0 CEOs
  • The Great American Health 2.0 Motorcycle Tour with David Kibbe
  • The Health 2.0 Unconference
  • Health 2.0 Accelerator

FOR MORE INFO http://www.health2con.com/