"If IT is regarded as order takers to fulfill your vision, 
you're not going to take full advantage of what technology has to 
offer."   -- Safeco Insurance CEO Mike McGavick

A new Internet2 Middleware group, MACE - Signet has been formed to come up with solutions surrounding a privilege management service.

A privilege management service is a key component of campus middleware that provides for central management of user privileges across a range of applications. Benefits include a standard user interface for privilege administrators, consistent simplified policy definition, interfaces to other infrastructure services and to application systems to support integration. Deploying and taking full advantage of a privilege management service has a number of technical and organizational prerequisites, based on some campus experiences with such deployment.

They are working on a Privilege Management Recipe. Nice to see some more movement in this part of [Identity Management].

Well this ends my first week back after the EAC conference. As I might have expected I didn't feel like blogging from the hotel in the evenings last week. Too much input during the day to spend any cycles outputing at night.

Anyway, I was fully emersed into the broad area of enterprise architecture. From theories on how to engineer an enterprise, to practical methods of defining solution patterns for re-useable technical architectures. I have many personal notes, and presentation slides from all the sessions that I need to parse through and synthesize into some sort of actionable material.

I think the most interesting facet was examples of how organizations are integrating the function of EA into their functional areas. Such as the important relationship with the project process, as well as with executive steering committees. Certainly the architects field is a difficult one, but I think if I would have dived into the industry material a year ago (such as the book, "Practical Enterprise Architecture" from Prentice Hall I am reading), I would have been more productive in my first year in the position.

How does an organization create blueprints for the who, what, how, when, where and why of the enterprise, when its busy moving from project to project. Projects are the executing arm of our service industry, and we all need to be involved in them. In fact, early in the EA maturity model, it is the means by which architecture is reviewed. However, unless time is spent creating models and re-usable patterns, then each project will require signifigant investment individually enginering a solution. We need to get to that place.

Besides getting re-aquainted with my desk this week, I spent a bit of time on a few projects. Created a process diagram for the "Policies on the Web" project, and also have been reviewing a Benefits ASP web offering HR is looking into. I don't know much about the HR module for IFAS, but there really isn't any functionality in the area of self-service benefits administration. There is double entry data input going on, and we all know the manual process we go through to select insurance cariers etc, so there is a real need here. We'll be meeting with HR again to understand their business process and how it relates existing systems. Any movement toward a solution will need to integrate with something, and we need to make sure the bridges can be made. I look at it as a great way to develop some understanding of existing architecture in a functional area I haven't spent much time in.

And thats how we do it. One area at a time, answering the basic questions of what, how etc. According to the EA maturity model (there are several flavors of course), many organizations start out knowing they need architecture, so it starts with a person or a few persons providing input to decision making processes. Then standards are defined, usually an overly specific list of which products/protocols you will and won't use (sound familiar?), then realizing thats too narrow, a principled based architecture is approached. So whats next? A broader framework, an EA template with great questions that we need to find the answers for. These are questions that are being answered each day, in different ways by different folks.... we need a blueprint for how each part of our components work together to provide services.

Eventually I hope that we can have a SOA (Service Oriented Architecture), where processes and functionality are more important than the specific widgets that deliver the results. Mix and match.... flexibility because of good design and some slack. To steal an analogy... you know those little plastic puzzles that we all played with as a kid, with the little squares you could slide around until you got the pattern correct? Well the most important piece of the puzzle was the slack, the empty space. Without the empty space you cannot rearrange the pieces in order to achieve your goal.

I don't blog enough. Sometimes we desire to create the perfect post every time. Spending time and breaking continuous thought by linking to sources and messing with formatting. But blogging is useful not for publishing finished work, but for getting out thoughts quickly to develop over time. Its the process that is more important than the result in this case. So thus, my ramblings for this work week.

I'll be attending the Enterprise Architectures Conference in New Orleans this week. As this is my first EA conference I hope to learn much. The hotel I'll be staying at supposedly has wireless Internet access, not sure about the conference. I'll be in APUIM as I can, and hopefully update my workblog as well as my personal blog with the experience.

According to InformationWeek, and any IT person with their eyes open... Companies are choking on information employees create

How are companies to bring the plethora of unstructured information under control?

The latest Information Week (March 15, 2004), has a significant article on The Need For Identity Management. The article inspired me to start documenting APU's need for further pursuing an Identity Management (IdM) strategy. However, the article in Information Week had some intersting points of dicussion.

The promise of Identity Management is to improve security, boost worker productivity, cut costs, and reduce the "integration friction" usually connected with giving employees, business partners, customers, and suppliers access to internal systems. The process starts internally, but the long-term objective is clear: Build a series of interconnected systems so an employee logged on to his company's intranet can access a business partner's systems and have those systems automatically trust the employee's digital credentials. The way to do this is through standards. This perspective of cross organizational authorization is called Federated Identity Management. Dan Blum, of the Burton Group has a good definition for federation, "standards and agreements that make identity and entitlements portable across autonomous domains".

Was curious as to where the Psi Jabber Client was in implementing the complete XMPP 1.0 protocol now that it has become a proposed standard by the IETF. The feature that is most lacking in Psi, is Multi User Chat (MUC) or JEP-0045. The older Groupchat protocol is supported, but lacking are advanced features such as moderation and creating and maintaining persistent rooms.

The Psi Development Roadmap has a definte plan for completing the XMPP 1.0 implementation and MUC support

There is also a MUC Feature Status Page where you can monitor progress on this feature.

From the, "Its about time dept..."

Intel Releases Linux Driver For Centrino WLAN - Werner Heuser writes "Finally Intel has made their different announcements about Linux support for the WLAN part of the Centrino technology become true. Though not yet officially announced an Open-Source driver with included firmware is available at SourceForge. The driver is still experimental and supposed to work with 2.4 Kernels as well as with 2.6 ones."

I have been running the Windows driver via the linuxantNDIS Loader in Linux since I got my Thinkpad R40. I'll have to give the native driver a go, and see how it works.

Update: According to the Todo list, the driver doesn't yet support WEP. I will definately be sticking with the Linuxant driverloader while keeping an eye on this project. LinuxAnt even supports WPA so they are way ahead.

W3C moves ahead with mobile Web standard - Efforts to improve the Web-surfing capabilities of handheld devices took a leap forward Thursday with the recommendation of a new standard by the World Wide Consortium (W3C). Infoworld Standards

CC/PP 1.0 Makes a lot of sense. Allow the web client to communicate with the web server in an intelligent way to negotiate a viewable format/display size.