SEARCH RESULTS
 
Showing 1-10 of 35 records
 
Expand article

OpenID family grows How it can transform Identity Federation between enteprises

2008-02-07 14:06:33 by Andras Cser in Security & Risk Management
 
...federation standards but a set of moves towards a simple technology that today can alleviate password management woes at service providers Technology aside, OpenID will greatly help with reducing and removing the legal obstacles in the way of identity federations proliferation. When payment-grade, commercial, and trusted identity provider...
 
Tags: openid, openid foundation, openid camp, accept openid authentication, integration, strong authentication integration, identity federations proliferation, simple technology, technology
 
 
 
 
Expand article

Ping automates identity federation in new server

2008-01-15 00:00:00 by John Fontana in Network World on Security
 
Ping Identity on Tuesday added features to automatically create connections between partners to support single sign-on as part of the next release of its identity federation server
 
Tags: identity, identity federation server, support single sign-on, connections, features, release, tuesday, partners
 
 
 
 
Expand article

Mission Statement for Federation

2008-06-26 10:35:35 by Gunnar Peterson in 1 Raindrop
 
Bruce Sterling (11/20/2001 You know what I want? I don't want a National ID Card. I want a Global Coalition Visa Like it or not, we've got a huge global diaspora now. It is a fact of life. Nations with stupid and corrupt politics have seen their clever people brain- drained away, to places where the cops don't shake you down twice a day. And...
 
Tags: people, clever people brain-, kindly people, platinum visa card, london, mission statement, london economy, card, true global society
 
 
 
 
Expand article

Thoughts on Token Security

2008-08-26 16:35:23 by Gunnar Peterson in 1 Raindrop
 
...federation and tokens . It is true that works on the web eventually filters into the enterprise, but it is also true that sometimes that things that start out as enterprise technologies later become cost effective on the web. So I would not assume that the current status quo on the web will hold. I don't think it will, the identity problems...
 
Tags: security, global federation, federation, single federation platform, security mechanism, resource security, security consultants, consumer web applications, web
 
 
 
 
Expand article

Security Services Deployment in Federated World

2008-06-25 13:25:43 by Gunnar Peterson in 1 Raindrop
 
...federation How should trust between providers be managed How should information about providers (metadata) be provisioned Which SAML profiles and bindings should be used Which messages and what part of each message should be signed Which identifiers and attributes should be exchanged What are the semantics of those attributes and identifiers?...
 
Tags: security, security protocol design, architecture, security architecture, metadata, metadata validation, metadata trust fabric, security mechanisms, dynamic federation
 
 
 
 
Expand article

Introducing Microsoft Code Name Zermatt

2008-07-09 20:27:00 by keith-brown in Security Briefs
 
...Federation Services v1 (ADFS) and Windows CardSpace. And the claims programming model I've been using is the one that shipped with WCF in the System.IdentityModel assembly But today I'm happy to announce that there's a new path forward in the claims world. Zermatt is the "identity framework" that I've been itching to talk about, but until...
 
Tags: zermatt, claims world, claims, zermatt includes, includes, claims-aware applications, framework, identity framework, identity
 
 
 
 
Expand article

Web Services and XML Security Training at OWASP

2008-08-28 08:55:59 by Gunnar Peterson in 1 Raindrop
 
...Federation and other technologies. The class looks at how Web services applications are built, what are common threats and vulnerabilities in Web services, and how to build your Web services application to defend against them I have often said that OWASP conferences are my favorite ones because they are in depth technically and very...
 
Tags: security, soa security standards, security standards, soa security, soa, security critical environment, information security, information, application security principles
 
 
 
 
Expand article

Target Web Sites Sued for Being Inaccessible to Blind Students

2008-08-28 13:33:49 by Editor in IT Security - The IT Security Industry's Web Resource
 
...Federation of the Blind over accessibility complaints with Target.com. Despite the law being unclear as to whether the Americans with Disabilities Act (ADA) applies to websites, the company will pay a substantial fee and update its web site to make it accessible to the blind In February 2006, Bruce Sexton Jr., a student at the University of...
 
Tags: blind, blind students, target, web site, web site content, blind student sued, retailer giant target, sued target, national federation
 
 
 
 
Expand article

Do you trust the merchants to protect your credit cards?

2007-12-11 09:01:26 by Khalid Kark in Security & Risk Management
 
...Federation (NRF) Chief Information Officer and Senior Vice President, David Hogan wrote a letter to the Payment Card Industry (PCI) Standards Council requesting that the card industry to stop requiring merchants to store complete card numbers. Currently, some merchants are required to keep credit card numbers for up to 18 months to satisfy...
 
Tags: card industry, card, payment card industry, credit card, merchants, credit card companies, provide merchants, merchants change, security
 
 
 
 
Expand article

The Return on Investment for Securing Information