What Every Identity Professional Should Know ~ An Introduction to IDPro

From IIW

What Every Identity Professional Should Know: An Introduction to IDPro


Day/Session:Thursday 3F

Convener:Steve “Hutch” Hutchison

Notes-taker(s): Steve “Hutch” Hutchison


Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:


Presentation deck at ->http://identityhutch.com/docs/idpro-iiw27-hutch.pptx


What should every identity professional know?

You are not alone.


It sounds like a very fortune cookie phrase to throw out in a presentation. But the reason I say it is because if there’s any common thread amongst the hundreds of members we’ve talked to, it’s that almost everyone in the field has had to rely on themselves and their own initiative to learn this craft. For and identity professional in an enterprise environment, it’s easy to feel alone. 


The creation of IDPro was born out of a need to 1) provide support the existing identity professionals in the industry, 2) develop a book of knowledge to help build the next generation of identity professionals, and 3) provide opportunities for identity professionals everywhere to collaborate and contribute to the advancement of the industry. 


To provide a roadmap, and to measure our success, we’ve adopted a number of efforts in five main program areas: Membership, Services, Operations, Industrial alliances, and the Book of Knowledge & Certifications.


Membership

  • 16 months in and we have 500 members! This is particularly impressive to me as these people have all joined in the beginning when our service delivery is in its infancy. We take a lot of cues from the IAPP organization who said “the people who join at the beginning are the ones that not only realize there’s a lot of work to be done, but it’s the work that’s actually important.” So for those of you who have joined already, I thank you.
  • Goal is to grow membership to 300 individual members with at least 5% from outside the US. On track with 270 as of today
  • Goal of establishing an enterprise membership model for non-identity-related businesses

User Groups & Event Meetups

  • We are currently tracking about 75 IAM user groups across the globe. 
  • Emphasize that these are IAM user group meetups and not IDPro chapter meetings. Our goal is not to come in and try to rebrand or take over any established group. What we would like to do is ask for 5-10 minutes during the meeting for an IDPro member to give a brief update of what’s been going on as well as any new information about collaboration opportunities. In return for that, we will help to find speakers and materials for the meeting organizers to use.
  • Currently piloting in Hartford, Charlotte, and Richmond. 
  • The local user group meeting is an incredibly important piece of the puzzle that accelerates progress in the industry. Not every one gets to go to conferences like this one but many more people can attend a quarterly meetup in the local area. It is in those forums that lofty industry-wide discussions can be thrown up against real-life use cases from people in your area.
  • Upcoming user group meet ups are listed on the IDPro.org website
  • We have also had IDPro-specific meetups at RSA, EIC, and Identiverse
  • Hutch has a biweekly cocktail party at his home in Richmond, VA every other Wednesday. You should attend.


Services

  • Monthly Newsletter
    • Since November 2017
    • All issues are archived on IDPro.org website
  • Slack
    • Daily realtime conversations
  • Discussion Threads
    • Usage is lessening as Slack usage rises
  • Events calendar
    • Curated listings for both user group meetups and upcoming identity-related conferences
  • Speakers Bureau
    • Not just to provide speakers for events
    • Provide mentors and guidance for professionals who haven’t spoken before, but would like to.
    • Would eventually like to provide scholarships for new speakers to travel to and attend conference 


Operations

  • Document and fully implement member on-boarding and off-boarding procedures
  • Evaluate and select an association management service
  • Evaluate adding dedicated staff to ease the operational burden on the Board
  • Build sustainable financial operations capabilities including budget planning, ongoing accounts receivable/payables, tax preparation and filing


Industrial Alliances

  • Completed
    • DIACC
    • FIDO Alliance
  • In Progress
    • IAPP
    • Identity Defined Security Alliance
    • OpenID Foundation
    • Women in Identity


Body of Knowledge

  • The BoK is expected to be the extremely important to the organization (and the industry).  Therefore quality is highly valued.
  • The BoK is expected to support a variety of constituencies, including practitioners (at various levels) as well as other professionals not entirely focused on identity - such as application developers, managers, and policy makers.
  • The subject matters in the body of knowledge will include 
    • techniques, methods, best practices that are applicable in general; 
    • similar materials which are specific to industries and/or jurisdictions
  • In some cases, there will be controversy about the materials, requiring a degree of finesse in presentation.
  • The set of this knowledge is not static, in fact it is advancing rapidly - therefore the methods of development and publication must support rather frequent publication.
  • While certification program is an eventual goal, it is more important to ship than to take the time to develop associated questions for certification
  • Progress
    • Completed
      • Construct and perform a membership survey to guide BoK efforts
      • Define potential approaches to establishing a BoK, including high-level staffing and funding estimates
    • In Progress
      • Deliver plan with specific milestones, tasks and resource levels needed for selected approach
      • Acquire staff and volunteers as well as and organize work for the selected approach
    • Not started
      • Define potential approaches to establishing a certification program, including high-level staffing and funding estimates


Final thoughts