Managing Dynamic Identity Federations using Security Assertion Markup Language

Md Sadek Ferdous

doi:10.4067/S0718-18762015000200005

Managing Dynamic Identity Federations using Security Assertion Markup Language

2015-05-01

8

OA

AI

DOI：10.4067/S0718-18762015000200005

原文链接

查看原文

摘要

En 中文

Security Assertion Markup Language is one of the most widely used technologies to enable Identity Federations among different organisations. Despite its several advantages, one of its key disadvantages is that it does not allow creating a federation in a dynamic fashion to enable service provisioning (or de-provisioning) in real time. A few approaches have been proposed to rectify this problem. However, most of them require elaborate changes of the language and do not provide mechanisms to manage federations dynamically. This paper presents a better approach based on an already drafted Security Assertion Markup Language Profile and requires no change in its specification, rather it depends on the specific implementation. Our proposed approach covers all aspects regarding the management of dynamic Identity Federation. It will allow users to create federations dynamically between two prior unknown organisations and will allow them to manage such federations as long as it is required. Implicit in each identity federation is the issue of trust. Therefore, the trust issues involved in the management of dynamic federations are analysed in details. Finally, a proof of concept is discussed with a few use-cases to elaborate the practicality of our approach.

Keyword:

Identity management

Federated identity management

Identity federation

Security assertion markup language (SAML)

Trust

Managing Dynamic Identity Federations using Security Assertion Markup Language

摘要

AI总结

期刊

机构

引用论文