Security assertion markup language Un article de Wikipédia, l'encyclopédie libre. Security assertion markup language (SAML) est un standard informatique définissant un protocole pour échanger des informations liées à la sécurité. Basé sur le langage XML, SAML a été développé par OASIS. SAML propose l'authentification unique (en anglais single sign-on ou SSO) sur le web. SAML est un standard supporté par un grand nombre de solutions de SSO pour les problèmes de gestion d'identité. SAML suppose que le commettant (souvent un utilisateur) se soit inscrit avec au moins un fournisseur d'identité. Historique de SAML[modifier | modifier le code] SAML 1.0[modifier | modifier le code] SAML 1.0 a été adopté comme norme par OASIS en novembre 2002. Les versions 1.0 et 1.1 de SAML sont semblables. SAML 1.1[modifier | modifier le code] SAML 1.1 a été ratifié comme norme d'OASIS en septembre 2003. SAML 2.0[modifier | modifier le code] Voir aussi[modifier | modifier le code] Références[modifier | modifier le code] (en) [SAMLBind] E.
OAuth For MediaWiki's (the software used by Wikipedia) OAuth support, see mw:Help:OAuth OAuth is an open standard for authorization, commonly used as a way for Internet users to log into third party websites using their Microsoft, Google, Facebook or Twitter accounts without exposing their password.[1] Generally, OAuth provides to clients a 'secure delegated access' to server resources on behalf of a resource owner. It specifies a process for resource owners to authorize third-party access to their server resources without sharing their credentials. Designed specifically to work with Hypertext Transfer Protocol (HTTP), OAuth essentially allows access tokens to be issued to third-party clients by an authorization server, with the approval of the resource owner. The third party then uses the access token to access the protected resources hosted by the resource server.[2] OAuth is a service that is complementary to and distinct from OpenID. History[edit] OAuth 2.0[edit] Security[edit] Uses[edit]
A SAML Whitepaper: How to Study and Learn SAML Abstract This brief whitepaper provides a functional introduction to the SAMLv2 specifications tailored to protocol designer and developer's perspectives. First a conceptual introduction is presented, next suggestions on how to study and learn SAML are given, and then more detailed aspects are discussed. 1. Conceptual Introduction to SAML SAML [OASIS.sstc‑saml‑exec‑overview‑2.0‑cd‑01] (Madsen, P. and E. Thus one can employ SAML to make statements such as: "Alice has these profile attributes and her domain's certificate is available over there, and I'm making this statement, and here's who I am." Then one can cause such an assertion to be conveyed to some party who can then rely on it in some fashion for some purpose, for example input it into a local policy evaluation gating access to some resource. Such applications of SAML are done in a particular "context of use". The specification of just how SAML is employed in any given context of use is known as a "SAML profile". 2. 3. 3.1. 3.2. 3.3.
AJAX:Getting Started - MDC This article guides you through the AJAX basics and gives you two simple hands-on examples to get you started. What's AJAX? AJAX stands for Asynchronous JavaScript And XML. The two major features of AJAX allow you to do the following: Make requests to the server without reloading the page Receive and work with data from the server Step 1 – How to make an HTTP request In order to make an HTTP request to the server with JavaScript, you need an instance of an object with the necessary functionality. if (window.XMLHttpRequest) { httpRequest = new XMLHttpRequest();} else if (window.ActiveXObject) { httpRequest = new ActiveXObject("Microsoft.XMLHTTP");} Note: For illustration purposes, the above is a somewhat simplified version of the code to be used for creating an XMLHttp instance. After making a request, you will receive a response back. httpRequest.onreadystatechange = nameOfTheFunction; httpRequest.onreadystatechange = function(){ }; "name=value&anothername="+encodeURIComponent(myVar)+"&so=on"
SAML Tutorial | SAML 2.0 Background Security Assertion Markup Language (SAML) holds the dominant position in terms of industry acceptance for federated identity deployments. SAML is deployed in tens of thousands of cloud single sign-on (SSO) connections. Thousands of large enterprises, government agencies and service providers have selected it as their standard protocol for communicating identities across the internet. SAML is XML-based which makes it a very flexible standard. Interoperability also gives SAML a huge advantage over proprietary SSO mechanisms. The Kantara Initiative, formerly known as the Liberty Alliance, has established a very successful interoperability testing program where SAML vendors prove out-of-the-box interoperability with other SAML implementations. How it Works Enterprise SAML identity federation use cases generally revolve around sharing identity between an existing IdM system and web applications.
IdCommons saml.html by Harold Lockhart 11/09/2005 Abstract As more and more systems are linked through Web services, portals, and integrated applications, the need for a standard that allows security information to be shared and exchanged becomes more and more apparent. Identity Federation Before computers were routinely connected to networks, security services—like authentication and authorization implemented in stand-alone systems—were completely self-contained. This approach had many obvious disadvantages. Single Sign-on With the introduction of the World Wide Web, hosting a single Web site on several machines became common. In addition, with networks continually growing larger, it is neither possible nor desirable to collect all the information about a user in one place. Still, the many types of information must remain available throughout the network for user authentication and authorization. SAML Fundamentals Moreover, SAML is specifically designed for flexibility. SAML Roles, Assertions, and Statements
the #1 Enterprise AJAX Framework for Java-based Rich Internet Applications (RIA) Backbase Customer Experience Platform (CXP) helps you create rich, interactive web portals and mobile applications. Allowing you to create, and manage deeply relevant customer experiences on any device. Delighting your customers and driving measurable business results. Backbase CXP comes with a complete set of integrated customer experience management functions, including: integrated content management, what-you-see-is-what-you-get editing, intelligent forms-based dialogs, secure application integration, cross device delivery, smart targeting, digital marketing tools, and integrated analytics. At the same time, Backbase CXP offers robust enterprise security and application integration technology that helps you integrate your existing systems and applications with ease, enabling you to leverage your previous IT investments. Learn more →
May 18: Dominque Boullier // Habitele | digital / cultural / mobile “From Personal Data Ecosystems and Mobile Phones to Habitele: anthropological theory of wearable digital identities” A talk by Dominque Boullier Talk: Friday, May 18, 3:00-4:30 pm, in Donald Bren Hall room 5011 [Map] Reading Group: Wednesday May 16, 3:00-5:00pm, SBSG 3323 [Map] Dominique Boullier is a Professor at Sciences Po Paris, Centre d’Etudes Européennes. He will discuss the habitele project: the development of a new conceptual framework that can account for the technological revolution in mobile communications. Reading Group Details There will be a reading group meeting on Wednesday, May 16th, from 3-5pm in SBSG 3323 in advance of Professer Boullier’s talk. Please see for more details, or contact Beth Reddy. Sponsored By: The Critical Theory Consortium
Identity management In computing, identity management (IdM) describes the management of individual principals, their authentication, authorization,[1] and privileges within or across system and enterprise boundaries[2] with the goal of increasing security and productivity while decreasing cost, downtime and repetitive tasks.[3] The terms "Identity Management" and "Identity and Access Management" (or IAM) are used interchangeably in the area of Identity access management, while identity management itself falls under the umbrella of IT Security.[4] Identity-management systems, products, applications and platforms manage identifying and ancillary data about entities that include individuals, computer-related hardware and applications. Definitions[edit] Identity management (IdM) is the task of controlling information about users on computers. Digital identity is an entity's online presence, encompassing personal identifying information (PII) and ancillary information. Identity management functions[edit]
OASIS Security Services (SAML Defining and maintaining a standard, XML-based framework for creating and exchanging security information between online partners Nathan Klingenstein, ndk@internet2.edu, ChairThomas Hardjono, hardjono@mit.edu, ChairHal Lockhart, hal.lockhart@oracle.com, SecretaryScott Cantor, SecretaryAnil Saldhana, anil.saldhana@redhat.com, Secretary Table of Contents Announcements SAML--Right Here, Right Now Webinar: This webinar from 25 Sept 2012 summarizes the accomplishments of the TC and discusses plans for SAML 2.1. Overview The Security Assertion Markup Language (SAML), developed by the Security Services Technical Committee of OASIS, is an XML-based framework for communicating user authentication, entitlement, and attribute information. If you are a manager looking for a high-level overview of SAML, the Executive Overview is recommended. For more information, see the TC Charter and FAQ. Subcommittees No subcommittees have been formed for this TC. TC Liaisons TC Tools and Approved Publications
Rethinking personal data | World Economic Forum - Rethinking personal data Report: Unlocking the Value of Personal Data: From Collection to Usage, February 2013 Unlocking the Value of Personal Data: From Collection to Usage, prepared in collaboration with the Boston Consulting Group, examines the need for new approaches in the policies which enable the managing of personal data in ways that are flexible, adaptive and contextually driven. The report highlights outcomes from a nine month, multistakeholder, global dialogue on how the principles for using personal data may need to be refreshed to ensure they protect the rights of individuals, unlock socio-economic value and are fit for the complexities of a hyperconnected world. A key insight from the report notes that the age of Big Data creates both new opportunities and risks, particularly as they relate to the privacy of individuals. The report calls for the importance of establishing an updated set of principles and the means to uphold them in a hyperconnected world. Who owns personal data?