• DocumentCode
    1130439
  • Title

    Dynamic Security Assertion Markup Language: Simplifying Single Sign-On

  • Author

    Harding, Patrick ; Johansson, Leif ; Klingenstein, Nate

  • Volume
    6
  • Issue
    2
  • fYear
    2008
  • Firstpage
    83
  • Lastpage
    85
  • Abstract
    Growth in the use of business process outsourcing and collaborative platforms is driving the demand for organizations to selectively share the identity information they maintain about their users with other partners. Widely accepted protocol such as the Security Assertion Markup Language (SAML) are designed to deliver single sign-on (SSO) and other security attributes, but although organizations can gain significant business value by using federated identity management techniques, they continue to face major implementation hurdles (such as wanting to scale from fewer than 10 partners to dozens, hundreds, or even thousands of them). Dynamic SAML takes advantage of security best practices and the exchange of configuration information to minimize the manual steps that administrators must currently perform to configure SAML connections securely. Although it isn´t yet possible to completely automate a decision of human trust, dynamic SAML can automate the underlying exchanges to make this decision fast, simple, and secure.
  • Keywords
    business data processing; groupware; outsourcing; security of data; business process outsourcing; collaborative platform; configuration information; dynamic security assertion markup language; federated identity management; human trust; security attribute; selective identity information sharing; single sign-on; Aggregates; Best practices; Collaboration; Humans; Identity management systems; Information security; Markup languages; Protocols; Resource management; Scalability; Building Security In; SAML federation dynamic; SSO; security assertion markup language; single sign-on;
  • fLanguage
    English
  • Journal_Title
    Security & Privacy, IEEE
  • Publisher
    ieee
  • ISSN
    1540-7993
  • Type

    jour

  • DOI
    10.1109/MSP.2008.31
  • Filename
    4489857