Failures

Abstract

We have covered several aspects of identity management relevant to an application development project. Writing an application with perfect identity management will be for naught, however, if flaws in your environment or processes introduce a vulnerability, especially one that compromises sensitive identity data. It is often said that one can learn a lot from failure. When it comes to identity management, however, we think it is preferable to learn from others' failures rather than your own! Inspired by George Santayana’s advice about the need to learn from the past, we’ve collected stories of past security breaches and their causes to help you avoid making such mistakes in your environment.