Identity and Web Services Federation in a Linux Environment

1
Identity and Web Services Federation in a Linux
Environment

• David Cafaro, Georgetown University
• Gianluca Brigandi, JOSSO Project
• Anthony Nadalin, IBM Corporation
• Terry Sigle, Sun Microsystems

2
Low-end IdM Concerns

• Support for Passive Clients
• Provide cross-application Single Sign-On
  experience to users
• Portal as the gateway for asserting users
  identity
• Stand-alone IdM infrastructure
• Requiring an agile implementation

3
Low-end IdM Reference Architecture
4
Mid-end IdM Concerns

• Provide Cross-organization and Cross-application
  Single Sign-On
• Existing business applications must become
  Identity-enabled
• Support for multiple application platforms
• Handling for C2B and E2B user workflows

5
Mid-end IdM ReferenceArchitecture
6
High-end IdM Concerns

• Support for Identity Federation
• Oriented towards standards compliance
• Handling for C2B, B2B and E2B user workflows
• Existing Web Services must become Identity-ready
• Reach maximum interoperability scalability
• Mid to Long term implementation

7
High-end IdM Reference Architecture
8
IdM Implementation Roadmap
9
Identity/Access Management Federation Open
Standards and Projects