The ERM World is Getting Smaller: Sun to acquire Vaau

A second enterprise roles management company has been acquired.  Sun has announced intent to buy Vaau.  Congrats to Sachin, Steve Tiches, and the rest of the gang at Vaau.  You are definitely joining a great team.

It will interesting to see how fast Sun can tie Vaau’s various components to their existing suite.  I have to imagine that what was Identity Auditor, now part of Identity Manager, will be replaced entirely by Vaau’s identity audit capability.  Comparing Sun’s time to integrate Vaau to Oracle’s time to integrate Bridgestream ought to be interesting as well.

Now it is official: Oracle buys Bridgestream

The deal is done.  To Ed, Volker, and all my friends over at Bridgestream – a hearty congratulations.

I have to figure that people are going to start clamoring about market consolidation in the ERM space and it will reach a climax at Digital ID World just a few weeks away.  Anyone want to through a prediction of who the next ERM company to get acquired will be?

So Ron Rymon of Eurekify threw it out there:

 …As a whole, I believe that Role Management (the combination of RMM and RA) is BIGGER than Provisioning. So again, you only see the tip of the iceberg now.

I think we are going to mark 2007 as the year that a shift occurred in user provisioning.  It shifted from being an end in-and-of-itself to the vehicle for service delivery.  We’ll see.

Oracle buys Bridgestream?

If the 451 Group got it right (as reported in this Dark Reading article), then the bar has just been set for Enterprise Role Management buyout deals. $35 million. $35 million? I can’t tell if that number is high or low.

Let’s consider than Access360 and Waveset had estimated price tags of roughly $100 million. Are we to imply that role management market should be sized at roughly a third of the overall provisioning market?  That I doubt.

The question that I am pondering is – who in the company derives the most value from an ERM deployment? HR? IT operations? IT ops derives value from role mining as it deploys user provisioning. HR can definitely get something out of top-down role lifecycle functions. But in both cases, to unlock that derived value, the company needs another technology to act as a proxy for role technologies. It is hard to derive the value of role mining without a user provisioning system. It is hard to derive value from top-down role lifecycle management without… an HR system.

And maybe that’s it. If this is true, and Oracle bought Bridgestream, then Oracle’s strategy is a three staged one. First, augment Oracle Identity Manager with traditional role management and mining functions. Provide strong capabilities to tie business roles to IT roles. Provide role mining capabilities.  Second, use Bridgestream’s enterprise/business role capabilities to augment Oracle’s numerous HR systems. PeopleSoft HR + Bridgestream = a very interesting combination. Third, continue to make good on the promise of tying ERP to IdM. If Fusion HR could publish dynamic business definitions (containing roles and organization structures) that OIM could tap, then Oracle customers would be well on their way to becoming more governable organizations.

Let’s see if after Labor Day there is any truth to this rumor.