- Community - mailman.kantarainitiative.org

Authorization Standards Workshop at Burton Catalyst San Diego, July 27, 2010, 12:30-2:30pm
by Dervla O'Reilly 01 Jul '10

01 Jul '10

When: July 27, 2010 12:30-2:30pm, Room Aqua 302, Hilton Bayfront Hotel Where: Burton Catalyst San Diego Title: Authorization Standards Workshop Abstract: As authorization generally follows authentication in a given online transaction, standardization of authorization has generally followed that of web authentication standards like SAML, WS- Federation, and OpenID. This workshop will explore developments & trends in authorization standards, including OAuth (a community initiative now being standardized within the IETF), User-Managed Access (evolving within the Kantara Initiative) and XACML (an OASIS standard). We’ll also look at some authorization use cases that may imply new requirements of these protocols. Through a combination of presentations, panels and demonstrations – we’ll explore how these existing & emerging authorization standards fit into the enterprise & social web infrastructure. Agenda: Welcome, Intro & Overview Paul Madsen – 5 mins Preso 1 - XACML 3.0 Update It’s been more than 5 years since eXtensible Access Control Markup Language (XACML) version 2 was standardized at OASIS. In the meantime XACML has grown in popularity as a standard and the number of production XACML implementations continues to grow steadily. XACML 3.0, currently in the final stages of ratification, contains significant enhancements that will enable it to keep pace with growing enterprise demands. In this session, Gerry Gebel will describe the enhancements to version 3.0, including the SAML 2.0, Delegation and Multiple Decision Request profiles. Gerry will also provide use case samples of how new features of XACML 3.0 can be implemented. Gerry Gebel, Axiomatics – 25 mins Preso 2/use case - OAuth As today’s businesses increasingly shift their processes into the cloud, a simplified set of design patterns and standards are required to harmonize the speed and compelling economics of the cloud with companies’ existing Identity management systems and processes. Topics will include the evolution of OAuth2, and it’s applicability to enterprise use-cases for cloud authorization and API federation. Chuck Mortimer, Product Management Director, Identity & Security, Salesforce.com – 25 mins Break 5 mins Preso 3/use case - IASWG overview and review of authorization use cases Description of IASWG purpose and goals, review authorization use cases received by IASWG thus far, review Concordia AuthZ Survey results. John Tolbert, Boeing & Gavin Illingworth, BMO – 25 mins Preso 4/use case - Federation Authorization and the Cloud – Why A Pragmatic Approach is Important Harding will discuss what organizations are doing today in the context of federation and authorization. Further he will examine what are the next pragmatic steps organizations should consider such that they can successfully implement a federated authorization model for cloud computing. Patrick Harding, PingID – 25 mins Closing comments 10 mins Please RSVP to Dervla O’Reilly, dervla[at]kantarainitiative[dot]org Event details: http://www.catalyst.burtongroup.com/NA10/ConferenceElements.html Burton Catalyst agenda: https://burtongroup.wingateweb.com/na2010/scheduler/weekAtGlance.do ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

White House Releases National Strategy for Trusted Identities in Cyberspace
by Dervla O'Reilly 30 Jun '10

30 Jun '10

Of interest to the Kantara Community. > White House Releases National Strategy for Trusted Identities in > Cyberspace > New York June 28, 2010 > http://www.ansi.org/news_publications/news_story.aspx?menuid=7&articleid=25… > > On June 25, the White House announced the release of the draft > National Strategy for Trusted Identities in Cyberspace (NSTIC, > pronounced N-STICK), a blueprint for reducing cybersecurity > vulnerabilities such as identity theft and fraud and improving > online privacy protections through the use of trusted digital > identities. > In a White House blog posting, Howard A. Schmidt, cybersecurity > coordinator and special assistant to the president, explained that > the NSTIC was developed in response to the president’s Cyberspace > Policy Review and in collaboration with key government agencies, > business leaders, and privacy advocates. The American National > Standards Institute (ANSI) submitted comments on earlier drafts of > the document, previously titled “National Strategy for Secure Online > Transactions.” > > The plan envisions the creation of an Identity Ecosystem where > individuals will no longer have to remember usernames and passwords > to access various online services. Rather, they will be able to > voluntarily choose a secure, interoperable, privacy-enhancing > credential (e.g., a smart identity card, a digital certificate on > their cell phone, etc.) from a variety of service providers – both > public and private – to authenticate themselves online for different > types of transactions (online banking, accessing electronic health > records, sending email, etc.). The Identity Ecosystem will be user- > centric, meaning that individuals will have more control over the > amount of personal information they use to authenticate themselves > online. > > The draft NSTIC is posted for comment through July 19 at www.nstic.ideascale.com > . Members of the general public can submit their own suggestions as > well as respond to and rank comments submitted by others. The > Department of Homeland Security (DHS), a key partner in the > development of the strategy, is collecting the comments. The White > House has indicated that a detailed implementation plan to accompany > the strategy will be circulated for comment later in July. The goal > is to have the strategy completed and signed by the president in the > September/October timeframe. ANSI encourages all interested members > and stakeholders to review the document and submit comments to the > DHS to have their viewpoints heard. > ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org >

1 0

Announcing leadership of Kantara Initiative’s Identity and Access Services Work Group (IASWG)
by Dervla O'Reilly 30 Jun '10

30 Jun '10

Congratulations to John Tolbert, The Boeing Company & Gavin Illingworth, BMO Financial Group. Both gentlemen will serve as co- leading chairs for Kantara Initiative’s Identity and Access Services Work Group (IASWG). As co-leading chairs, they received a majority of WG voting participants with all votes in favor of their appointment. We look forward to the good work to come from this group. You can review the currently submitted use cases to the IASWG towards their preparation for the Authorization Standards workshop at Burton Catalyst USA in San Diego July 27, 2010. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Webinar--Gartner on the Emerging Identity Infrastructure: Why Identity and Context Virtualization is Essential, July 15, 2010 8-9am PDT
by Dervla O'Reilly 29 Jun '10

29 Jun '10

Below are details for the Gartner Webinar July 15, 2010, 8-9am PTD which may be of interest to the Kantara Initiative community. Gartner on the Emerging Identity Infrastructure: Why Identity and Context Virtualization is Essential Webinar Registration Join Gartner analyst Bob Blakley and Radiant Logic VP Dieter Schuller as they lay out a roadmap for a new IdM infrastructure—one with virtualization at its core. Don’t miss this discussion on: • Why the current push model no longer works in today’s identity landscape. • How virtualization finally separates the production and storage of identities from their consumption. • How you can use smart virtualization to deliver identity as a service and create a complete IdM infrastructure for all your initiatives. • How context will drive finer-grained authorization and profile management—and change the way you relate to your customers. When: Thursday, July 15, 2010 8:00 AM - 9:00 AM PDT Use the form on the right to reserve your Webinar seat. * Indicates a required field Thu, Jul 15, 2010 8:00 AM - 9:00 AM PDT Show time in my time zone * First Name: * Last Name: * Email Address: * Phone: * Organization: * Job Title: * Purchasing Time Frame: * Role in Purchase Process: By clicking this button you submit your information to the Webinar organizer, who will use it to communicate with you regarding this event and their other services. View system requirements Your email address and personal information will be used by the Webinar organizer to communicate with you about this event and their other services. To review the Webinar organizer's privacy policy or opt out of their other communications, contact the Webinar organizer directly. Safeguarding your email address and Webinar registration information is taken seriously at GoToWebinar. GoToWebinar will not sell or rent this information. View the GoToWebinar Privacy Policy. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Auto Reply: Community Digest, Vol 14, Issue 4
by deleted＠deleted.deleted 29 Jun '10

29 Jun '10

Message deleted.

1 0

Kantara Initiative announces eValid8 as their first Accredited Assessor
by Dervla O'Reilly 28 Jun '10

28 Jun '10

Kantara Initiative announces eValid8 as their first Accredited Assessor Kantara Initiative is proud to announce eValid8 as their first Accredited Assessor for the Identity Assurance Accreditation and Certification Program. The Identity Assurance Accreditation and Certification Program is committed to helping drive organizational interoperability in order to assure trust in the identity-based experience of end users, Relying Parties and Federation Operators. Kantara-Accredited Assessors perform Assessments of Credential Service Providers based on the Kantara Initiative Identity Assurance Framework and provide a Kantara Assessment Report (KAR) to the Kantara Initiative Assurance Review Board (ARB). The ARB then makes its recommendations to the Board of Trustees concerning the granting of Kantara-approved service status based on the KAR. The Certification Program assesses applicants against strict criteria according to the Level of Assurance desired to be attained, and grants to candidates of the program the right to use the Kantara Initiative Mark, a symbol of trustworthy identity and credential management services at specified Assurance Levels. The results of this certification program are maintained electronically on the Kantara Initiative website in the Kantara Initiative Trust Status List, which lists both approved services and accredited assessors. Kantara Initiative is pleased to begin work with eValid8. The Kantara Initiative Identity Assurance Accreditation and Certification program is now accepting Credential Service Provider applications for Certification. Please address queries regarding the Identity Assurance Accreditation and Certification Program to staff[at]kantarainitiative[dot]org or via our Contact Us form. eValid8 are a certified IT auditing firm and recognized as a leader in the field of identity management, IT auditing, privacy impact assessment, and regulatory compliance. ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Update - Re: Announcement: SAML 2.0 Full Matrix Test Event Registration Now Open
by Joni Brennan 24 Jun '10

24 Jun '10

Apologies to all on this list for the extra mail. I made a glaring typo in this announcement. The fee is 16,000 and not 6,000. I inadvertently left off the '1'. Please make a note of the update. Thanks On Thu, Jun 24, 2010 at 1:34 PM, Joni Brennan <joni(a)ieee-isto.org> wrote: > We are pleased to announce that registration is now open for the SAML 2.0 > Full Matrix Test Event. > > Expanding on the highly successful Liberty Interoperable™ Program, the > Kantara Initiative Interoperability Test Program is designed to certify > interoperability of products and technologies across multiple > identity-related protocols and standards, including SAML 2.0, InfoCard, > OpenID, ID-WSF and elements of the WS-* stack (WS-Security, WS-Trust, > WS-Federation). > > The first Test Event scheduled to occur is the SAML 2.0 Full Matrix Test > event. This event will reference the soon to come Kantara Initiative SAML > 2.0 Test Plan, the eGovernment SAML Implementation Profile v2.0 and the > eGovernment SAML Implementation Profile v1.5. > > The test event will take place on-line starting September 20th and running > through November 5th, 2010. The fee for this event is $6,000 USD. The > Test Event will be operated by our partners the Drummond Group Incorporated. > > > - [1] To register for the event please visit the SAML 2.0 Test Event > Registration page. > - [2] For further details on the event and reference documents visit > the SAML 2.0 Full Matrix Event Details page. > - [3] For answers to questions regarding the SAML 2.0 Full Matrix Test > Event send us an inquiry via our Contact Us form. > > By taking part in this event participants will be further assuring market > trust in the interoperability of their implementations through the Kantara > Initiative Interoperability Certification Program. We look forward to your > inquiries and participation. > > [1] http://signup.kantarainitiative.org/event/ > [2] > http://kantarainitiative.org/confluence/display/certification/SAML+2.0+Full… > [3] http://kantarainitiative.org/confluence/display/GI/Contact+Us > > Regards, > > Joni > > -- > Joni Brennan > IEEE-ISTO > Kantara Initiative > Managing Director > voice:+1 732-226-4223 > email: joni @ ieee-isto.org > gtalk: jonibrennan > skype: upon request > > Join the conversation on the community@ list - > http://kantarainitiative.org/mailman/listinfo/community > > > > > > -- Joni Brennan IEEE-ISTO Kantara Initiative Managing Director voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan skype: upon request Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

Announcement: SAML 2.0 Full Matrix Test Event Registration Now Open
by Joni Brennan 24 Jun '10

24 Jun '10

We are pleased to announce that registration is now open for the SAML 2.0 Full Matrix Test Event. Expanding on the highly successful Liberty Interoperable™ Program, the Kantara Initiative Interoperability Test Program is designed to certify interoperability of products and technologies across multiple identity-related protocols and standards, including SAML 2.0, InfoCard, OpenID, ID-WSF and elements of the WS-* stack (WS-Security, WS-Trust, WS-Federation). The first Test Event scheduled to occur is the SAML 2.0 Full Matrix Test event. This event will reference the soon to come Kantara Initiative SAML 2.0 Test Plan, the eGovernment SAML Implementation Profile v2.0 and the eGovernment SAML Implementation Profile v1.5. The test event will take place on-line starting September 20th and running through November 5th, 2010. The fee for this event is $6,000 USD. The Test Event will be operated by our partners the Drummond Group Incorporated. - [1] To register for the event please visit the SAML 2.0 Test Event Registration page. - [2] For further details on the event and reference documents visit the SAML 2.0 Full Matrix Event Details page. - [3] For answers to questions regarding the SAML 2.0 Full Matrix Test Event send us an inquiry via our Contact Us form. By taking part in this event participants will be further assuring market trust in the interoperability of their implementations through the Kantara Initiative Interoperability Certification Program. We look forward to your inquiries and participation. [1] http://signup.kantarainitiative.org/event/ [2] http://kantarainitiative.org/confluence/display/certification/SAML+2.0+Full… [3] http://kantarainitiative.org/confluence/display/GI/Contact+Us Regards, Joni -- Joni Brennan IEEE-ISTO Kantara Initiative Managing Director voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan skype: upon request Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

Kantara Initiative June News Round-Up
by Dervla O'Reilly 04 Jun '10

04 Jun '10

Catch the round up of recent updates from Kantara Initiative: Authorization Standards Workshop at Burton Catalyst San Diego, July 27, 12:30-2:30pm Merger of Kantara’s IdP Selection WG into ULX WG Kantara Initiative Meeting, Oct. 19-21, Paris, France hosted by Orange- FT Kantara Initiative announces the formation of the Federation Interoperability Work Group (FIWG) Kantara Initiative Announces Identity Assurance Framework 2.0 Announcing Yasuhisa Sakamoto & Toshihiro Suzuki as Kantara Initiative’s Japan WG co-chairs Kantara Initiative Engages Drummond Group to Manage Global Interoperability Program Comparing OAuth and UMA – by Eve Maler Kantara speakers featured at Burton Catalyst Prague, June 21-24, 2010 Kantara Initiative Webcast via BrightTALK: Identity Assurance Frameworks within Federated IAM Systems, May 6 - listen and view the audio of this Webcast Catch up on recent activities at industry events: UMA at EIC 2010, IIW X round-up What exactly is “open” in Open Identity? Industry events – contact Dervla O’Reilly regarding discounted conference rates: pii2010, August 17-19, Seattle, Hacker Halted October 9-15 Miami, WHIT 6.0 Nov. 8-10 Washington D.C., Gartner Identity & Access Management Summit November 15-16 San Diego Feel free to forward to colleagues and friends. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Kantara Initiative welcomes new member Mike Waddingham
by Dervla O'Reilly 01 Jun '10

01 Jun '10

Please join us in welcoming new member Mike Waddingham at Member Level Individual Contributor. Mike's areas of interest is Identity Assurance. We look forward to his participation and involvement. Regards, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0