DocumentCode
1130439
Title
Dynamic Security Assertion Markup Language: Simplifying Single Sign-On
Author
Harding, Patrick ; Johansson, Leif ; Klingenstein, Nate
Volume
6
Issue
2
fYear
2008
Firstpage
83
Lastpage
85
Abstract
Growth in the use of business process outsourcing and collaborative platforms is driving the demand for organizations to selectively share the identity information they maintain about their users with other partners. Widely accepted protocol such as the Security Assertion Markup Language (SAML) are designed to deliver single sign-on (SSO) and other security attributes, but although organizations can gain significant business value by using federated identity management techniques, they continue to face major implementation hurdles (such as wanting to scale from fewer than 10 partners to dozens, hundreds, or even thousands of them). Dynamic SAML takes advantage of security best practices and the exchange of configuration information to minimize the manual steps that administrators must currently perform to configure SAML connections securely. Although it isn´t yet possible to completely automate a decision of human trust, dynamic SAML can automate the underlying exchanges to make this decision fast, simple, and secure.
Keywords
business data processing; groupware; outsourcing; security of data; business process outsourcing; collaborative platform; configuration information; dynamic security assertion markup language; federated identity management; human trust; security attribute; selective identity information sharing; single sign-on; Aggregates; Best practices; Collaboration; Humans; Identity management systems; Information security; Markup languages; Protocols; Resource management; Scalability; Building Security In; SAML federation dynamic; SSO; security assertion markup language; single sign-on;
fLanguage
English
Journal_Title
Security & Privacy, IEEE
Publisher
ieee
ISSN
1540-7993
Type
jour
DOI
10.1109/MSP.2008.31
Filename
4489857
Link To Document