Abstract
Technologies like XML and Web Services have posed new requirements to authentication, authorization and identity management for the Web as an application platform. Beyond merely providing access control for a single isolated system, modern, flexible architectures support a business-spanning federation of applications and services by sharing digital identities. The diversity of today’s specifications and the many aspects to be considered, like e.g. privacy, system integrity and distribution in the Web, makes the construction of these architectures a very time-consuming task. Thus, a uniform view on the overall system is needed that abstracts from technological issues. This can be achieved by extracting the core concepts from the emerging Federation technologies and specifications and formalize them to an extent that they can be used as a foundation for configurable applications and services. In this paper, we introduce a solution catalogue of reusable building blocks for Identity and Access Management (IAM). We also present a configurable system that supports IAM solutions in Web-service-based applications.
Chapter PDF
Similar content being viewed by others
Keywords
- Access Control
- Identity Provider
- Security Assertion Markup Language
- Authorization Mechanism
- Provide Access Control
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.
References
Witty, R.J., Wagner, R.: The Growing Need for Identity and Access Management, Stamford, CT (2003)
Maler, E., Mishra, P., Philpott, R.: Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V1.1 – OASIS Standard (2003), http://www.oasis-open.org/specs/ (18.10.2004)
Liberty Alliance Specifications – Web site (2004), Liberty Alliance Group: http://www.projectliberty.org/resources/specifications.php (18.10.2004)
Bajaj, S., et al.: Web Services Federation Language (WS-Federation) – IBM (2003), http://www-106.ibm.com/developerworks/webservices/library/ws-fed/ (14.10.2004)
Linn, J., et al.: Trust Models Guidelines – OASIS Working Draft (2004), http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security (19.01.2005)
Gamma, E., et al.: Design patterns: elements of reusable object-oriented software. Addison- Wesley professional computing series, p. 395. Addison-Wesley. xv, Reading (1995)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Meinecke, J., Nussbaumer, M., Gaedke, M. (2005). Building Blocks for Identity Federations. In: Lowe, D., Gaedke, M. (eds) Web Engineering. ICWE 2005. Lecture Notes in Computer Science, vol 3579. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11531371_29
Download citation
DOI: https://doi.org/10.1007/11531371_29
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-27996-9
Online ISBN: 978-3-540-31484-4
eBook Packages: Computer ScienceComputer Science (R0)