DocumentCode :
1130439
Title :
Dynamic Security Assertion Markup Language: Simplifying Single Sign-On
Author :
Harding, Patrick ; Johansson, Leif ; Klingenstein, Nate
Volume :
6
Issue :
2
fYear :
2008
Firstpage :
83
Lastpage :
85
Abstract :
Growth in the use of business process outsourcing and collaborative platforms is driving the demand for organizations to selectively share the identity information they maintain about their users with other partners. Widely accepted protocol such as the Security Assertion Markup Language (SAML) are designed to deliver single sign-on (SSO) and other security attributes, but although organizations can gain significant business value by using federated identity management techniques, they continue to face major implementation hurdles (such as wanting to scale from fewer than 10 partners to dozens, hundreds, or even thousands of them). Dynamic SAML takes advantage of security best practices and the exchange of configuration information to minimize the manual steps that administrators must currently perform to configure SAML connections securely. Although it isn´t yet possible to completely automate a decision of human trust, dynamic SAML can automate the underlying exchanges to make this decision fast, simple, and secure.
Keywords :
business data processing; groupware; outsourcing; security of data; business process outsourcing; collaborative platform; configuration information; dynamic security assertion markup language; federated identity management; human trust; security attribute; selective identity information sharing; single sign-on; Aggregates; Best practices; Collaboration; Humans; Identity management systems; Information security; Markup languages; Protocols; Resource management; Scalability; Building Security In; SAML federation dynamic; SSO; security assertion markup language; single sign-on;
fLanguage :
English
Journal_Title :
Security & Privacy, IEEE
Publisher :
ieee
ISSN :
1540-7993
Type :
jour
DOI :
10.1109/MSP.2008.31
Filename :
4489857
Link To Document :
بازگشت