ID Next 2013 Keynote Slides by Mike Schwartz
Download as PPT, PDF•1 like•1,829 views
The document discusses the importance and value of identity management, focusing on concepts like access by affiliation and assurance levels. It references various identity providers and methodologies including SAML, UMA, and OpenID Connect while also outlining best practices. The content appears to be part of a presentation or discussion from the IDNet'13 event led by Michael Schwarz of Gluu.
ID Next 2013 Keynote Slides by Mike Schwartz
- 1. OAuth2 Federation Michael Schwarz, Founder / CEO Gluu Idnet’13 event – 19-20 November 2013 #idn13 IDentity.next’11 – What’s next www.everett.nl www.everett.nl on Identity?
- 2. IDentity.next’13 – What’ is the value of your Identity? 2
- 3. IDentity.next’13 – What’ is the value of your Identity? 3
- 4. IDentity.next’13 – What’ is the value of your Identity? 4
- 5. IDentity.next’13 – What’ is the value of your Identity? 5
- 6. Identity Providers Web Sites IDentity.next’13 – What’ is the value of your Identity? 6
- 7. Access by affiliation Access by attribute Access by individual …some of the original goals of InCommon IDentity.next’13 – What’ is the value of your Identity? 7
- 8. Level Of Assurance Level Of Protection Level Of Control IDentity.next’13 – What’ is the value of your Identity? 8
- 9. Software SAML UMA OpenID Connect Best Practices Schema IDentity.next’13 – What’ is the value of your Identity? 9
- 10. XML published on public website Signed IDentity.next’13 – What’ is the value of your Identity? 10
- 11. certificate URLs for SAML endpoints IDentity.next’13 – What’ is the value of your Identity? 11
- 12. IDentity.next’13 – What’ is the value of your Identity? 12
- 13. IDentity.next’13 – What’ is the value of your Identity? 13
- 14. IDentity.next’13 – What’ is the value of your Identity? 14
- 15. UMA IDentity.next’13 – What’ is the value of your Identity? 15
- 16. IDentity.next’13 – What’ is the value of your Identity? 16
- 17. IDentity.next’13 – What’ is the value of your Identity? 17
- 18. IDentity.next’13 – What’ is the value of your Identity? 18
Editor's Notes
- #2: Thank you Identity Next for inviting me to speak!
- #3: Federation is not a protocol! It is not SSO with an external web site. It’s a group of autonomous parties cooperating via a central authority. People are empowered by associating with an organization. An organization is empowered by joining a federation. Federations are empowered by joining inter-federations! No one knows more about federations than the Dutch.
- #4: The goal of online federations is to build trust… trust enables collaboration between autonomous domains.
- #5: The Internet is probably the world’s biggest federation… but there isn’t much trust
- #6: Smaller groups of domains can create more trust. However, trust can also be expensive, so more efficient frameworks were sought.
- #7: InCommon is a good example of a multi-party federation
- #8: The federations I’m interested in built a framework for security. Still true today, these goals were articulated by RL Bob more than a decade ago. But the goals have expanded.
- #9: Federations provide the contractual rules… Level of Assurance, Level of Protection, Level of Control
- #10: Federations also provide the tools : Choose standard protocols, define standard jargon, certify software, publish websites…
- #11: Federations are based on public key – private key cryptology… how are the public keys distributed? This is the trust model!
- #12: The metadata is just a big list of the certificates for all the IDPs and SPs. It’s a handy place to publish other information about the participants.
- #13: Only one problem… SAML is not going to be ubiquitous on the Internet… October 2012 – Final RFC OAuth2 … proliferation of Oauth2 APIs for authentication
- #14: Enter OpenID Connect : one OAuth2 API so developers won’t have to learn one API for FB and one API for Google
- #15: Connect defines more than authentication: discovery and client registration…
- #16: Connect is not the only profile of OAuth2: UMA provides a profile for authorization : defining who can get to what web sites or API’s
- #17: How to use OAuth2 for federations? Building the first bridge…
- #18: Federations are a journey… the hardest part of the journey is the first step.
- #19: Thank you!