Episode 042: 08‐27‐2024 Strata Identity Continuity - GluuFederation/identerati-office-hours GitHub Wiki

Title: Strata Identity Continuity

YouTube Recording

Description

If you're running a business, an IAM outage can ruin your day... and result in lost revenues. Enterprises need IAM Resilience--an "always-on" identity infrastructure. What if you could enterprises could use several commercial IDP infrastructure providers to innoculate against a major outage at one? This is the idea behind Strata Identity Continuity™. In this episode, we'll discuss this new approach and consider real world applications.

Homework

Takeaways

  • The Strata "Orchestrator" can run in the cloud or as a lightweight on-prem container, and acts as the SAML IDP, OpenID Provider or even LDAP server for local applications. It wouldn't be wrong to think of the Orchestrator as a proxy, or Identiy broker. Strata also supports use cases where the Orchestrator is detachable--in other words may go offline or air gapped for a time. In these cases the Orchestrator re-connects to the mothership and pulls its latest configuration.

  • In the Starta Schema Abstraction Layer™ , Strata uses IDP schemas and on-the-fly mapping to normalized IDP user claims or even transform the values with a little bit of Go programming.

  • In LogicMonitor's survey of IT leaders, 93% of the top 2000 companies reported that downtime costs exceeding $300,000 per hour. 48% reported hourly costs exceed $1 million per hour. So there is a clear business case to implement IDP failover.

  • The Strata cloud control plane is used by enterprise identity architects, but increasingly others within the organization, like the CISO.

Livestream Audio Archive

here