Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Multivendor identity systems can work together, demo shows

CA, IBM, Microsoft, Novell, Oracle, VeriSign and others behind push for users to control identity information
By John Fontana , Network World , 06/28/2007

San Francisco – A unique demonstration showed user-centric identity software from major vendors, start-ups, one-woman projects and open source hackers all working in concert to replace passwords with validated identity-card access to Web-based resources.

The two-hour interoperability demonstration hosted at the annual Burton Group Catalyst conference was co-sponsored by the Open Source Identity System (OSIS), which is a working group within the Identity Commons project to unite the leaders of open source efforts around digital identity.

The OSIS steering committee includes CA, Cordance, IBM, Microsoft, NetMesh, Novell, Nulli Secundus, Oracle, Parity Communications, Ping Identity, Sxip Identity and VeriSign.

The demo’s intent was to show that emerging user-centric identity systems -- which put users in control of their own identity information -- can be federated and act as a universal identity mechanism for access to Web-based resources.

This identity layer is commonly known as the “identity metasystem” a term coined by Microsoft identity architect Kim Cameron.

But while the lofty goal of user-centric identity is still in the distance, Wednesday’s demonstration showed that it is obtainable.

The demonstration focused on technology that uses identity protocols OpenID, WS-*, and the Security Assertion Markup Language (SAML). While the user-centric identity model today is more closely aligned with consumer needs, corporate users see the technology as a potential means for handling some of their own federated identity issues.

“This seems to address a number of enterprise needs that we have,” said an IT architect for a Fortune 50 company he asked not be identified. “It could provide our community of company retirees with credentials that are better than a user name and password and that are more cost effective to manage and that are going to be more user friendly. It seems like a perfect model, so I am excited about that.”

But he said the key will be that all the different protocols interoperate – or better yet, get boiled down to one – because if they don’t, it will necessitate integration middleware that he said would make the technology less attractive because of added costs and management headaches.

The OSIS demonstration began to wash away some of those fears.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comments (1)
Login
Forgot your account info?

Multivendor identity systems can work together, demo showsBy Microsoft Subnet on June 29, 2007, 6:12 pmThis demo was focused on consumers but it has interesting applications for corporate users. Anything that can help create a common identity management standard...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.