Authenticating the identities of users on a system is an important aspect of Oracle security, but when identities
are stolen, experts say the next line of defense is proper authentication of the transactions that users set in motion.
Oracle yesterday revealed plans to buy Bharosa for an undisclosed sum. The company boasts 25 million users and will become Oblix Inc., Thor Technologies Inc. and OctetString Inc.
"What Oracle has wanted to do is two-fold," said Jaquith. "First, Oracle wants to provide a consistent set of identity frameworks for its own products, because it has a fairly diversified set of e-business products. Secondly, they would like to be a credible provider of identity solutions in their own right, with a full portfolio of offerings."
"Over the past couple of years there has been a growing recognition that identity management is really a base or a core technology that isn't simply something that you add on anymore," King said. "Larger vendors are really seeing identity management as a key part of many other business processes and applications that they're supporting."
Where Oracle could use an identity management boost
It's unclear where Oracle will focus its identity management efforts next, but Jaquith said he'd like to see the software goliath spend more time working with emerging Internet identity standards such as OpenID.
"I think that's something that they'll probably need to spend a little more energy on," he said, "but whether or not they'll need to do an acquisition is hard to tell."