management - Philip Guth on Diigo

9Expand

Web paradigm arises as alternative to SOA - 6/1/2008 - Manufacturing Business Technology

Tags: identity, management, soa, federated, jreading on 2008-06-06 -All Annotations (0) -About

more fromwww.mbtmag.com

Based on a simple open-source Apache Tomcat Web server, customers connect with data services, each of which is assigned separate URIs. In turn, if an organization seeks to personalize access by individual or role, it can do so by granting users access only to specific URIs.
Add Sticky Note
- Interesting idea
  posted by phil_guth on 2008-06-02
Access control is enforced, not by any kind of Web services authentication or federated identity standard, but by the internal directory or access control systems. And because the metadata is indexed using standard HTML, it is searchable by Google or any other Web search engine.
One company that has taken WOA to heart is SnapLogic, a start-up founded by veterans of Informatica. SnapLogic is unveiling its own data services marketplace, promoted as “Really Simple Integration.”
Specifically, instead of using a SOAP envelope, a plain-old XML message—often abbreviated as “POX”—is sent with a request to a URI, an information resource that is represented as a Web address, or URL. And in place of a UDDI Web services registry, a common Web search engine is used to find URIs, or resources, that satisfy a REST service request.
Acknowledging the success of back-to-basics approaches like Amazon Web Services, Stamford, Conn.-based Gartner Group Analyst Nick Gall coined the term Web-Oriented Architecture (WOA), which refers to the use of common Web technologies to support interactions that mimic SOA. In essence, it applies the same Web technologies that people use for manually interacting with Web sites to establish more automated connections.
Data services provider StrikeIron, for example, is offering a hosted marketplace for data services such as Dun & Bradstreet business credit checks, U.S. Patriot Act compliance, global address correction, email address validation, sales and use tax retrieval, and in-depth corporate profile information for customers or business partners.
A backlash has emerged against the complexity of SOA. When it comes to standards, at least 80 have been approved—or are in the pipeline to be approved—by standards bodies such as OASIS and the W3C. With such a wealth of standards, it's easy to spot overlapping specifications, such as SAML and WS-Federation, which cover federated identity and are supported by different—and in some cases overlapping—groups of vendors.
All major enterprise platform providers—IBM, BEA, Microsoft, Oracle, and SAP—are backing SOAP messaging, WSDL service descriptions, and WS-Security for specifying the kinds of tokens used for transmitting authorizations, all of which has fueled hope that Web services would deliver on the promise of SOA.

4Expand

IBM Pushes Federated Identity Management

Tags: federated, identity, management, ibm, jreading on 2008-06-06 -All Annotations (0) -About

more fromwww.eweek.com

SDCExec.com - Article - Exostar Launches Federated Identity-as-a-service Offering

Tags: federated, identity, management on 2008-05-13 -All Annotations (0) -About

more fromwww.sdcexec.com

7Expand

Internet2 Community Releases Shibboleth Version 2.0

Tags: identity, management, shibboleth on 2008-05-12 -All Annotations (0) -About

more fromwww.prnewswire.com

rom an operational perspective, the new version of Shibboleth makes it
easier for IT staff both at the identity provider institution and service
provider to install, operate and manage the software. For instance, to
participate in a federation, institutions typically are required to
implement a directory schema which provides a consistent set of user
attributes among the federating organizations. Shibboleth 2.0 allows
institutions to utilize their legacy directory schema by translating the
data into the federation- specific attributes as needed in real time. In
doing so, Shibboleth 2.0 greatly decreases the resources needed to
implement the solution.
Shibboleth 2.0 also adds new security features to ensure additional
protection of user information. It includes encryption technology specified
in the SAML 2.0 standard and provides an improved method for usage logging
at the home institution to better track abuse or inappropriate use of the
system.
Shibboleth's unique
anonymous identifier gives the user control over what additional
identifiable information (if any) they choose to provide to a vendor, and
assures the user's privacy across services," said Holly Eggleston,
Assistant Department Head, UC San Diego Library Acquisitions.
Shibboleth 2.0 enhances the ability for identity providers to use and
manage "anonymous identifiers" to protect user privacy but still allow for
personalization. The identity provider assigns a persistent unique
identifier to a specific user which allows service providers to tailor and
improve services based on the needs of that user without knowing their
specific identity.
Shibboleth leverages an institution's login and directory systems to
authenticate users at their home institution (or "identity provider") and
then passes only the relevant information, or "attributes," to the service
provider to enable the user access to its online resources. Attributes can
include a wide range of information that characterize the user, e.g.
identity, permissions at the service provider, employee or student status
at the university, class enrollment, age, graduating class, etc. The
service provider and institution make agreements on which attributes are
needed to make that user eligible to access specific resources.
Shibboleth 2.0 adds an open source implementation of the OASIS SAML 2.0
standard to the suite of protocol implementations available in previous
releases. The software provides a secure, single-sign on mechanism for
institutions to enable their users to access protected online resources
within their campuses and from their external service provider partners
while at the same time protecting individual user privacy.
"Shibboleth aims to help our community meet the increasing demand for
access to protected online applications and resources as well as to support
the growing need for campus-based researchers to use online collaboration
tools to support work with peers at other institutions. Shibboleth 2.0
provides an improved platform for exchanging information in a secure and
privacy-preserving manner while at the same time reducing the
administrative burdens for institutions and their service provider
partners,"

Resources | idtrust.xml.org

Tags: PKI, identity, idtrust, management on 2008-03-24 -All Annotations (0) -About

more fromidtrust.xml.org

2Expand

SourceWire | Press Releases - Identity 2.0 tops 2008 trends in identity management

Tags: identity, management, openid on 2008-03-23 -All Annotations (0) -About

more fromwww.sourcewire.com

1Expand

6Expand

Liberty Alliance Announces First Companies to Pass Full-Matrix SAML 2.0 Interoperability Testing @ SYS-CON Media

Tags: alliance, federated, identity, liberty, management on 2008-01-10 -All Annotations (0) -About

more fromwww.sys-con.com

Symlabs, Inc. - Symlabs Federated Identity Suite version 3.3.0 - Symlabs Federated Identity Suite is a complete set of components with the flexibility to create an ideal identity management solution for nearly any environment. It includes a federation server with identity provider, service provider, and identity web services capabilities, plus client connectors, templates, samples, and a powerful built-in scripting language to build, integrate and customize identity management solutions in record time. Symlabs Federated Identity Suite can be tailored for service provider, network operator, or enterprise network deployments to create circles of trust, enhance existing systems with single sign-on/log-off, or roll out new identity-based services that make it safe and easy to use personal and business information in networked applications.
Sun Microsystems - Sun Java(TM) System Federated Access Manager 8.0 - Sun Java System Federated Access Manager 8.0 is the next release of Sun's access management and federation solution. Developed from the OpenSSO open source distribution (http://www.opensso.org/), Sun's Federated Access Manager will provide comprehensive access management, federation, and web services security as modular components within a single Java application. Customers will be able to choose what components to deploy, while maintaining a single license and product. This product will be a key component of Sun's identity management portfolio.
RSA, The Security Division of EMC - RSA Federated Identity Manager 4.0 - RSA Federated Identity Manager enables enterprises to share trusted user credentials securely and confidently. RSA Federated Identity Manager v4.0, the latest release, is designed to simplify administration and accelerate deployment timelines. RSA Federated Identity Manager v4.0 supports SAML 1.1 and 2.0, WS-FED v1.0 and ADFS v1.0. The solution includes out-of-the-box integrations with numerous authentication authorities including BEA Weblogic, IBM Websphere and Microsoft IWA and .NET. Partner configuration management is aided by a configuration dashboard and automated metadata exchange.
IBM - Tivoli Federated Identity Manager, version 6.2 - IBM Tivoli Federated Identity Manager (TFIM) delivers a versatile federated single sign- on solution that conforms to SAML, WS-Federation and Liberty ID-FF federation protocol standards and offers a modular web access management and web-services identity trust management for use in an SOA environment.
Hewlett Packard - HP Select Federation 7.0 patch1A - HP Select Federation 7.0 enables the comprehensive, cross-enterprise SSO and sharing of identity details through the concurrent support of all the major federation standards.
Liberty Alliance, the global identity consortium working to build a more trusted Internet for consumers, governments and businesses worldwide, today announced that products from Hewlett-Packard, IBM, RSA, The Security Division of EMC, Sun Microsystems and Symlabs, Inc. have passed Liberty Alliance testing for SAML 2.0 interoperability.