Welcome!

Recurring Revenue Authors: Zakia Bouachraoui, Pat Romanski, Yeshim Deniz, Elizabeth White, Xenia von Wedel

News Feed Item

Google, NTT and the US GSA Deploy SAML 2.0 for Digital Identity Management

Organizations Worldwide Leverage SAML 2.0 Liberty Federation to Enable New Business Services, Help Meet Regulatory Requirements

NEW YORK, Jan. 29 /PRNewswire/ -- Liberty Alliance, the global identity consortium working to build a more trusted internet for consumers, governments and businesses worldwide, today released highlights of SAML 2.0-based digital identity management applications that are delivering real world value to users and organizations around the globe. These applications are among the many public and private sector deployments helping to drive a more secure and privacy-respecting internet identity layer across applications, sectors and regions based on SAML 2.0 standards.

"Virtually all federation efforts and almost all federation product vendors have built-in SAML 2.0 support," said Gregg Kreizman, research director, Gartner. "Governments and enterprises planning new identity federations should base their implementations on the SAML 2.0 standards."

Standard in Use in the Global Government and Public Sectors

With government organizations in The Americas, Asia, Australia and Europe building and deploying SAML 2.0-based identity applications, SAML 2.0 has become the standard of choice in the global eGovernment and public sectors. These governments are relying on SAML 2.0 to deliver a wide variety of new online services to citizens, help meet compliance mandates and to provide business and trading partners with a secure and trusted platform for conducting identity related transactions. A digital map and description of global eGovernment deployments based on SAML 2.0 Liberty Federation is available at http://projectliberty.org/liberty/adoption/egovernment/egov_world_map.

"The beauty of the proven interoperable SAML 2.0 standard is that it has been developed with input from deployers and vendors of digital identity management solutions to support a broad range of online identity related transactions," said Roger Sullivan, president of the Liberty Alliance Management Board and vice president of Oracle Identity Management. "From authenticating at social networking sites to enterprise, financial and government transactions requiring the highest degree of security and privacy protection, SAML.2.0 is providing the foundation for organizations in every sector to build and deploy successful digital identity management solutions."

Cross-Industry Demand for Secure and Privacy-Respecting Digital Identity Solutions

The applications highlighted today are only a small sample of the hundreds of B2B and consumer-facing SAML 2.0-based deployments and proof-of-concept applications in the global identity market. These applications span vertical segments where users and deploying organizations demand the highest levels of security and privacy protection and proven interoperability is critical to managing wide scale digital identity management solutions. Liberty Alliance maintains a list of deploying organizations at http://www.projectliberty.org/liberty/adoption with highlights from the applications announced today including:

Google - Using SAML 2.0 allows Google's customers to treat web-based authentication to Google Apps(TM) the same way they treat authentication to their other services. "We're extremely happy with the number of products that natively support SAML, as well as the number of people available to help our customers use it," said Gabe Cohen, product manager, Google Enterprise. "We chose to support SAML because it provides immense flexibility as a robust standard and the security that our customers demand. Ultimately, we want our customers to make their own decisions about their security and authentication policies, and SAML makes it easy." For more information on Google Apps, visit http://www.google.com/a.

NTT - NTT has developed SASSO, a personal Identity Provider that enables users to single-sign-on to a PC and leverage the strong authentication capabilities of the mobile phone to conduct a wide range of secure identity- based transactions. SASSO uses the increasingly ubiquitous mobile phone as an Identity Provider (IdP) to allow users to access a Service Provider (SP). Once authenticated by their own mobile phone, the IdP on the mobile phone issues a SAML assertion signed by a private key and sends that assertion to SPs. The application drives strong authentication into online transactions and leverages the convenience and privacy capabilities of the mobile phone to allow users to better control their own identity information. A Liberty Alliance SASSO case study is available at http://projectliberty.org/resource_center/case_studies/ntt_sasso.

"Our technology employs mobile phones and SAML 2.0 to strike the tough balance between security and privacy concerns on the one hand, and usability on the other-two necessities in the modern world," said Dr. Kenji Takahashi, senior research engineer and supervisor, NTT Information Sharing Platform Laboratories.

The US GSA E-Authentication Solution - Originally launched in 2002 as part of the President's Management Agenda, E-Authentication Solutions assists federal agencies in mitigating the security and privacy risks associated with e-government and helps control government costs associated with authenticating large numbers of end users. In October 2007, the US General Services Administration (GSA) announced that passing Liberty Alliance SAML 2.0 interoperability testing is a prerequisite for participating in the US E- Authentication Identity Federation. The decision by E-Authentication Solutions to have vendors pass Liberty Alliance SAML 2.0 testing recognizes the important role proven interoperability plays in advancing identity federations. More information about the E-Authentication Solution is available at http://www.cio.gov/eauthentication/.

"E-Authentication Solutions wants federal agencies to be able to select the software that meets their unique business requirements while also delivering assurances that it will interoperate with other applications used within the Federation," said Myisha Frazier-McElveen, Acting Program Executive, E-Authentication Solutions. "The US GSA is requiring vendors to pass Liberty Alliance SAML 2.0 interoperability testing to help ensure identity products can interoperate from day one and provide long-term business value to US Government Agencies."

Source: Gartner, Inc. "The U.S. Government's Adoption of SAML 2.0 Shows Wide Acceptance", by Gregg Kreizman, John Pescatore and Ray Wagner, October 29, 2007

About Liberty Alliance

Liberty Alliance is the only global identity organization with a membership base that includes technology vendors, consumer service providers and educational and government organizations working together to build a more trusted internet by addressing the technology, business and privacy aspects of digital identity management. The Liberty Alliance Management Board consists of representatives from AOL, BT, France Telecom, HP, Intel, Novell, NTT, Oracle and Sun Microsystems. Liberty Alliance works with identity organizations worldwide to ensure all voices are included in the global identity discussion and regularly holds and participates in public events designed to advance the harmonization and interoperability of CardSpace, Liberty Federation (SAML 2.0), Liberty Web Services, OpenID and WS-* specifications. More information about Liberty Alliance as well as information about how to join many of its public groups and mail lists is available at http://www.projectliberty.org/

Google and Google Apps are trademarks of Google Inc. CONTACT: Russ DeVeau Liberty Alliance http://www.projectliberty.org/ 508-487-6102 - Office 908-251-1549 - Mobile [email protected] Russ Deveau @ comcast.net AOL IM (Russ DeVeau): devcommruss

Liberty Alliance

CONTACT: Russ DeVeau of Liberty Alliance, Office +1-508-487-6102, Mobile
+1-908-251-1549, [email protected]

Web site: http://www.projectliberty.org/

More Stories By PR Newswire

Copyright © 2007 PR Newswire. All rights reserved. Republication or redistribution of PRNewswire content is expressly prohibited without the prior written consent of PRNewswire. PRNewswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

IoT & Smart Cities Stories
While the focus and objectives of IoT initiatives are many and diverse, they all share a few common attributes, and one of those is the network. Commonly, that network includes the Internet, over which there isn't any real control for performance and availability. Or is there? The current state of the art for Big Data analytics, as applied to network telemetry, offers new opportunities for improving and assuring operational integrity. In his session at @ThingsExpo, Jim Frey, Vice President of S...
@CloudEXPO and @ExpoDX, two of the most influential technology events in the world, have hosted hundreds of sponsors and exhibitors since our launch 10 years ago. @CloudEXPO and @ExpoDX New York and Silicon Valley provide a full year of face-to-face marketing opportunities for your company. Each sponsorship and exhibit package comes with pre and post-show marketing programs. By sponsoring and exhibiting in New York and Silicon Valley, you reach a full complement of decision makers and buyers in ...
Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessio...
In his keynote at 18th Cloud Expo, Andrew Keys, Co-Founder of ConsenSys Enterprise, provided an overview of the evolution of the Internet and the Database and the future of their combination – the Blockchain. Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settl...
The Internet of Things is clearly many things: data collection and analytics, wearables, Smart Grids and Smart Cities, the Industrial Internet, and more. Cool platforms like Arduino, Raspberry Pi, Intel's Galileo and Edison, and a diverse world of sensors are making the IoT a great toy box for developers in all these areas. In this Power Panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists discussed what things are the most important, which will have the most profound e...
The Jevons Paradox suggests that when technological advances increase efficiency of a resource, it results in an overall increase in consumption. Writing on the increased use of coal as a result of technological improvements, 19th-century economist William Stanley Jevons found that these improvements led to the development of new ways to utilize coal. In his session at 19th Cloud Expo, Mark Thiele, Chief Strategy Officer for Apcera, compared the Jevons Paradox to modern-day enterprise IT, examin...
Rodrigo Coutinho is part of OutSystems' founders' team and currently the Head of Product Design. He provides a cross-functional role where he supports Product Management in defining the positioning and direction of the Agile Platform, while at the same time promoting model-based development and new techniques to deliver applications in the cloud.
There are many examples of disruption in consumer space – Uber disrupting the cab industry, Airbnb disrupting the hospitality industry and so on; but have you wondered who is disrupting support and operations? AISERA helps make businesses and customers successful by offering consumer-like user experience for support and operations. We have built the world’s first AI-driven IT / HR / Cloud / Customer Support and Operations solution.
LogRocket helps product teams develop better experiences for users by recording videos of user sessions with logs and network data. It identifies UX problems and reveals the root cause of every bug. LogRocket presents impactful errors on a website, and how to reproduce it. With LogRocket, users can replay problems.
Data Theorem is a leading provider of modern application security. Its core mission is to analyze and secure any modern application anytime, anywhere. The Data Theorem Analyzer Engine continuously scans APIs and mobile applications in search of security flaws and data privacy gaps. Data Theorem products help organizations build safer applications that maximize data security and brand protection. The company has detected more than 300 million application eavesdropping incidents and currently secu...