Featured Article from Software Monetization
Feature-Based Cloud Pricing Requires Good Authorization Technology
Authorization is often overlooked in many cases when it comes to features of web applications.
“As applications grow and add features, there is a push to better monetize and control who has access to those features,” according to Andy Mayhew, SRM Service Operations Manager at SafeNet (News - Alert) in a recent LicensingLive! blog post.
A one-size-fits-all subscription model is often not the best way to maximize revenue for full-featured web applications. In many cases, it is better to offer different plans based on feature availability.
But rolling out feature-based pricing can be a challenge.
“While some big players have stepped in to the authentication space, the developer of web applications has been often left to their own devices. This often leads to a simple yes/no on the rights and permissions for the authenticated user across an entire web application,” noted Mayhew.
Early in the lifespan of the web service this not a big issue, but as the web service matures, feature-based pricing often makes sense. And by then, it doesn’t come easily because the infrastructure is not in place.
“Attempting to graft on feature-level permissions after the fact can be time consuming, cost prohibitive, and takes time away from developing the core of your application,” wrote Mayhew.
Confusion over the difference between authorization and authentication is part of the problem. Authorization is granting access to a service based on identity, similar to the permission to drive an automobile with a driver’s license. Authentication is using that driver’s license to prove the person driving the car is the person on the license.
These two related concepts are often decoupled at the enterprise level, and single sign-on authentication options are pushed by Facebook (News - Alert), Google, Twitter, as well as proposed open standards such as OAuth. For products that require cryptographically strong multi-factor authentication, there’s also SafeNet’s BlackShield product.
But authorization does not have as many champions, making it difficult for many developers.
The Windows Active Directory system authenticates the user when they login and that identity confirmation is then used by various licensing systems to authorize or otherwise allow access to applications, but this is not a good option for developers working on web services.
Thankfully, though, there are some options for thoughtful developers.
One option is SafeNet’s Sentinel Cloud Services, which provide feature-level licensing as a service. It is relatively simple to bake feature-level authorization into a web service using Sentinel Cloud’s runTime library or its secure REST API. This can be done on a feature-by-feature basis.
With a solution such as Sentinel Cloud Services, the web developer no longer must create a licensing infrastructure. Instead, he or she can focus on getting applications to market faster and developing the core business.
Want to learn more about the latest in communications and technology? Then be sure to attend ITEXPO Miami 2013, Jan 29- Feb. 1 in Miami, Florida. Stay in touch with everything happening at ITEXP. Follow us on Twitter
Edited by Peter Bernstein
Enterprise Software Users Want More – The Survey Is In!
Featured White Papers
- NEW! Consolidating Software Licensing Technologies Post M & A: A survival guide for software publishers & intelligent device manufacturers
- NEW! 5 Tips for Software Monetization in the IoT
- NEW! Supporting Software Business Transformation with Systems Designed for the Task
- NEW! Penny Wise, Pound Foolish: The Fallacies of Choosing to Build a Software Monetization System
- License and Entitlement Management in the Era of the Internet of Things
- The Impact of Virtualization and The Cloud on Software Entitlements
- Understanding White Box Cryptography
- How to Achieve a Cloud-Connected Experience Using On-Premise Applications
- The Four Cornerstones of a Comprehensive Software Monetization Strategy
- Meeting Customer and Business Needs in a Changing Market
- Cloudy with a Chance of Insight: An ISV's Guide to Customer Usage Data Collection and Analysis in the Cloud
Featured Case Studies
- NEW! Miko Maximizes Software Revenue & Reduces Operational Expenses with Gemalto Sentinel
- NEW! Xsens Technologies Streamlines Operations & Expands Revenue with Sentinel
- NEW! Structural Test and Monitoring Software Protected by Sentinel Integrated with NI LabVIEW
- NEW! Seize the IoT Opportunity
- NEW! Format International Replaces Inflexible Software Protection and Licensing Dongles with Sentinel LDK with EMS
- NEW! Envitrans Reduces Software Piracy & Expands Revenue with Sentinel LDK and Sentinel EMS Business Challenges
- NEW! Snell Protects Valuable IP and Streamlines Licensing Operations with Sentinel RMS & EMS
- Following Several Acquisitions, Sage Implements Sentinel RMS to Harmonize a Multitude of Disparate Licensing Systems- existing on site now
- With SafeNet Sentinel, AEOL Protects their Market-leading Training Software while Driving Back-office Efficiencies- existing on site now