Browse by Tags

• CardSpace
• DigitalMe
• eic2008
• event
• Higgins
• Identity
• Identity Metasystem
• information card
• IRM
• Liberty Alliance
• Microsoft
• OpenID
• openifnocard
• rsa
• rsa2008
• SAML2
• t-home
• VRM

• openid is toast

  Mike (one of those who need no sleep) blogged about Fun Communication's openid idtheft site and I encourage you to read Mike's post and try your personal idtheft immediately. Back here?! Well, you knew all this already, didn't you? But seeing it in action is another thing, I guess. So where does this lead us? Remember the " openid dogfight " from September 2007? I too think that we need a spectrum of solutions. I agree that openid is for when an RP has "trivial" security requirements, but I think Read More... Posted Monday, May 26, 2008 1:33 PM from ignisvulpis | 1 Comments Filed under: CardSpace, OpenID, Identity Metasystem, DigitalMe, Higgins, Claims, information card, openifnocard

• CardSpace @ Microsoft 360° Security Days

  Microsoft Germany offers the Microsoft 360° Security Days to German speaking architects, project managers and developers. One session for architects and project managers is about Microsoft CardSpace . I really hope this will be an inspiring talk given by a true believer of the claims paradigm. It's a pity that a participant can not provide her claims by using information cards during registration for the event. Anyway, I am happy that CardSpace is a topic. We need more events that advocate information Read More... Posted Wednesday, May 21, 2008 6:08 AM from ignisvulpis | 1 Comments Filed under: CardSpace, Microsoft, Claims, information card, event

• Craig Mundie: Claims, Privacy and Everything

  Today I re-viewed the Craig Mundie keynote from the RSA 2008 conference. Many things were said that I liked: Recently, a few weeks ago, we announced that we had acquired Credentica, and their U-Prove technology, which we think is going to be an example of a way to realize this requirement where we can tease apart some of the individual claims around identity or elements of identity and present them individually, and therefore be able to prove certain pieces of information without disclosing too much. Read More... Posted Wednesday, May 07, 2008 9:04 AM from ignisvulpis | 1 Comments Filed under: CardSpace, Identity, Claims, rsa, rsa2008

• EIC2008 Workshops

  This morning I was at the VRM unworkshop at the EIC2008 conference. What I understood there was that VRM is about principles for service providers that serve my claims. - what are the logging and privacy contraints ? - can administrators see my data ? etc Whether this concept will be a success, I don't know. I think that most users don't understand what and how much and to whom and under what conditions they should give away claims or not. So in the sense of making a deal with the web-shop (I give Read More... Posted Tuesday, April 22, 2008 9:05 AM from ignisvulpis | 1 Comments Filed under: Liberty Alliance, VRM, Claims, eic2008, IRM, t-home

• Lots of progress, little updating

  A lot has happened since the last time I've posted: I've got SAML 1.1 working with LifeRay Portal. This was for a demo, but the code could be used in production (IMO). It works in the same way that the existing CAS filter works, except that there's a lot more code responsible for validating SAML. Been poking around with the OpenSSO Federation Libraries. I'm trying to find a SAML 2 implementation that I can use (quickly), and the OpenFedLib libraries seem a bit more intuitive than the upcoming OpenSAML2 Read More... Posted Wednesday, November 21, 2007 3:14 PM from Sick Of Acronyms | 0 Comments Filed under: SAML2, Claims