PATECCO's Thoughts on IAM in Relation to B2B and B2C

Welcome Mr. Sand. Welcome Mr. Plak. Mr. And Smith patch are the founders and managing directors of Paco company based in Germany, focusing on consulting and integration services around identity access management with Paco. Tell us a little bit about Paco. Paco is an identity in access governance company, working as an advisor, reliable and trusted to fortune 500 companies. One of the challenges organizations are facing is today that they not only need to handle their employees and, but business partners and consumers. So what is your view in the B2B and B2C relations?

Looking back in the last couple of years, our clients kept it very separate to manage those identities. So they had different directories, different user stores, everything, what they actually succeeded with their internal infrastructure. Getting rid of identity. Zeros started again with external collaboration, with treating customers in a, in a certain way in their directories where they now are trying to clean up again and try to get one user store or one, one point of view on, on their identities.

So there's a lot of target these days about a new discipline, C I a M for consumer or customer identity management. So what do you think about that? My point of view, it's it's rather about how do you wanna treat those different identities? So looking to on-premise identities, meaning employees, contract working for your company in an yeah, on a contract basis is very different from someone who has no contract, no legal relation to your company. So they want to have different usability point of view. They want to have less security burns.

They just want to collaborate with you or shop in your shop, whatever. Yeah.

So, so we do, we need them two separate identity management and identity management for the employees and the CIM for the customers and consumers, or should it be treated as an entity or at what level do we need to integrate? Right.

So on, on the one inside, it's a question of capabilities of these different products. If you look at, at, at the let's call it old school on premise identity, access management products, they don't serve the same capabilities as an SA based identity, access management, you have different flexibility. So in SAS you have less flexibility, but you have more security mechanisms like authentication, like excess control. You want to apply adaptive or syndication like multifactor syndication, stuff like that.

So it's not, it's not really to say it's just one system, but it's a question of building one ecosystem of your identity management. Okay. So from your customer projects, what are concrete experiences and maybe takeaways you would share? Yeah. Good question. So looking back to our previous projects, our clients try to manage all these identities in one system and kept a very high security burden to their client's business partners and consumers. The question is, if someone shops in your, in your website, does he really need to apply OS two factor?

You actually want to have a credit card, which is billable, right on the other side, if you are using this same identity, the same person, human being to collaborate with you to provide information about what kind of medicine did you buy, what kind of products did he use and how did it actually succeed? Then he might provide sensible information, sensitive information, which has yeah, different compliance regulations where you need to apply different security standards. So once he's starting to provide this kind of information, you want to treat them with different authentication Mechanisms.

If you had to name one or two or three key success factors for that type of project, what would it be? I think it's, first of all, a matter of requirements and talking to your business, it's not about having it security on board. It's more about what is your sales going to, to, to, yeah. To expect from managing those identities. You want to track identities maybe and see, okay, he might be interested in this and you want to focus on advertising your products in a different way.

And, and I think that's a key success factor to, to really focus on your business instead of focusing on it security, even though it security is very important. Okay.

Thank you, Mr. And thank you, Mr.

Patrick, Paco is a leading provider of advisory and consulting integration for consumer identity and access management, delivering that type of project to the customers. Thank you.

Say, give a.