2014 State of SaaS Identity Management

cloud CSA security alliance sM enelogin 2014 State Of SaaS Identity Management View full report: onelogin.com/resources Majority of SaaS Vendors Leveraging SAML Security Assertion Markup Language (SAML) The Gold Standard for signing into cloud applications is SAML. It completely eliminates all passwords and instead uses digital signatures to establish trust between the identity provider and the application. System for Cross-domain Identity Management (SCIM) Designed to make managing user identities in cloud-based applications and services easier. The SCIM standard defines a schema for representing users and groups and a REST API for all the necessary CRUD operations. 17% 67% 97% of Saas Vendors Backing SAML-based SSO 67 percent of the SaaS vendors surveyed use SAML today for single sign-on identity management, while 19 percent said they planned to implement SAML within the next 12 months. Only 3 percent had no plans to implement the 13% 15% SAML SCIM 3% standard. 11% Have today Planned in 12 months Planned in 24 months No plans 19% 55% Customer Demand and Security Drive SAML Adoption Primary drivers for adopting SAML? 26.4% cited demand from existing customers; 21.24% cited improved security and compliance; and 14.83% cited multi-factor authentication. Customer Demand Security & Compliance Multi-factor Auth. Low Support Cost 37% 25% SAML Adoption Not Limited to the Web Browser 37% of Saas vendors surveyed leverage SAML on mobile versions of their app, and 25% leverage it on the desktop versions of their app. JL Integrating, Storing and Securing User Data SAAS APPS STORING SENSITIVE DATA 61% Assurance certifications User management API Integrating Active Directory ISO 27001 SAML REST SOC 1 None Custom SOC 2 SCIM Manual Other SOAP WS-Federation CSA STAR OpenID FedRAMP 14% 15% NTLM 19% Social Network 18% 19% FISMA What assurance certifications How do customers integrate their Active Directory or LDAP servers? Does your application have a user management does your company have or plan to achieve in the next 12 months? API? 31% 32% 33% Profile of Survey Respondents Within the past year 64% of respondents delivered their first SaaS app within 100 the last 4 years. 2-4 years 5-7 years people completed the online survey 7+ years A variety of SaaS product categories were represented 75% claimed that Global Enterprises or Large Businesses represented their largest customer segment File/Content Sync & Sharing IT Management Proj Mgmt / Collaboration ERP Enterprise Social Network Business Analytics (BI) Applicant Tracking 12% 4% 11% 4% Global Enterprise 9% 4% 45% 9% Salesforce Automation / CRM 3% IT Security Integration Financial Management BPM 6% Systems Monitoring Performance Management Marketing Human Capital Management. Email / Productivity Customer Service 2% 6% 2% 6% 2% 6% Small Business 5% 1% 30% Large Business Workplace Management IT Services Management 4% 19% 4% 1% Medium Business Contract 4% February 24, 2014 14% 13% 6% 7% 11% 11%