"Although the economic downturn has affected the IAM market, it is proving to be fairly resilient and, along with other security areas, IAM continues to receive higher prioritisation compared with other technologies," said Ruggero Contu, principal research analyst at Gartner. "IAM technology is a critical component of enterprises' security strategies, and Gartner clients have indicated that approximately 8 per cent of their security budgets are dedicated to IAM."
Overall, the IAM market is estimated to grow to $11.9 billion by the end of 2013. Mr Contu said that IAM products will continue to attract interest and investment during the coming years because it remains a critical technological area for enabling businesses to improve and automate processes relating to access management.
However, the evolution of the market has been impacted by a number of internal and external factors. Internally, merger and acquisition activity has resulted in the consolidation of the vendor landscape around larger, established players, particularly in key areas such as user provisioning and web access management. Externally, the impact of the economic downturn and the consequent tightening of IT budgets, with a related increasing demand for IAM as a service type of product, have influenced the levels of spending directed on IAM and delivery models end users are opting for.
Data based on interactions with clients at Gartner IAM Summits in 2009 in North America and Europe, the Middle East and Africa (EMEA) provided insight into what are considered to be the most valuable and critical technologies to be employed as part of IAM corporate strategy. More established mature tools were mentioned alongside emerging products and among areas showing the highest interest were role-based access, followed by single sign-on. Within the more-emerging IAM technologies, products relating to privileged accounts management and entitlement management appeared to be of the highest criticality.
Suite-based IAM technology currently appears to be the most-preferred product type for organisations and looks set to become even more prevalent in purchasing strategies. Almost 40 per cent of companies interviewed indicated this preference during the next couple of years, together with an increasing reliance on managed security services and consulting services for IAM.
IAM functionality delivered as a service is still in its early stages with survey respondents indicating that between 1 and 5 per cent of their IAM budget are spent on IAM technologies purchased under a software-as-a-service (SaaS) agreement. However, driven by economic and technological factors, and the expanding availability of SaaS and cloud computing, purchase of IAM functionality delivered as a SaaS is expected to accelerate over the coming years. This is confirmed by a Gartner survey of 111 end-user respondents in North America and EMEA showing that 27 per cent of the businesses interviewed during the 2009 IAM Summits agreed, pointing to an expected increase in spending on SaaS IAM products by 2011.
"A hierarchy of IAM-as-a-service requirements will evolve over the coming years, beginning with basic authentication and access management needs and progressing to provisioning and administration functionality," said Mr Contu. "Compliance reporting and analysis services for existing enterprise-based IAM will also evolve quickly to accommodate the rise in complexity of enterprise IAM needs without wholesale expansion of the enterprise IAM solution."
Gartner further predicts that cloud-computing "construction" for private clouds will require specific IAM-as-a-service functionality to accommodate scale and standardised-delivery needs. Public cloud computing will drive IAM standards, with multiple vendors vying for the role of "toolkit providers" for both the public and private clouds. "This will be increasingly important as a means of meeting requirements related to credential management and licensing models for use, and we can expect that new vendors will enter the IAM-as-a-service market from unexpected segments (for example, virtualisation and grid computing) as they seek to provide scalable service environments for repositories, administration and reporting," said Mr Contu.
Gartner analysts will provide more detailed analysis on the future of the IAM industry at the Gartner Identity & Access Management Summit 2010, being held 3-4 March, at the Lancaster London hotel. The Summit will help delegates make the business case for IAM and explain precisely where and how IAM can deliver advantage and why it is worth every penny. In particular, Gartner analysts will provide practical advice on how to minimise expenditure and maximise value. Members of the media can register by contacting Ben Tudor on + 44 (0) 1784 267 738 or at [email protected] Additional information is available at www.europe.gartner.com/iam.
You can also follow the event on Twitter at http://twitter.com/Gartner_inc and use #GartnerIAM.
Gartner analysts will also focus on IAM issues at the Gartner Security & Risk Management Summit 2010 taking place 21-23 June in Washington D.C. Analysts will provide insight and a vision of how things will evolve over the long term and provide road maps on how organisations and solutions providers will get there. Members of the media can register for the Summit in Washington D.C. by contacting Christy Pettey, Gartner PR, at [email protected] For further information on the Security & Risk Management Summit 2010, please visit www.gartner.com/us/itsecurity.
Additional information is available in the report "Market Trends: Identity and Access Management Market, Worldwide 2007-2013," which is available on the Gartner's website at http://www.gartner.com/resId=1297628
Gartner, Inc. (NYSE: IT) is the world's leading information technology research and advisory company. Gartner delivers the technology-related insight necessary for its clients to make the right decisions, every day. From CIOs and senior IT leaders in corporations and government agencies, to business leaders in high-tech and telecom enterprises and professional services firms, to technology investors, Gartner is the indispensable partner to 60,000 clients in 10,000 distinct organizations. Through the resources of Gartner Research, Gartner Consulting and Gartner Events, Gartner works with every client to research, analyze and interpret the business of IT within the context of their individual role. Founded in 1979, Gartner is headquartered in Stamford, Connecticut, U.S.A., and has 4,000 associates, including 1,200 research analysts and consultants in 80 countries. For more information, visit www.gartner.com.