Liberty Alliance publishes updated specs for ID management
The new framework updates a standards document released in April
November 12, 2003 12:00 PM ETIDG News Service -
The Liberty Alliance Project industry consortium published the final version of its Phase 2 specifications today and named five companies that will be releasing identity management products that support the new standards.
The Phase 2 Liberty Identity Federation Framework, which finalizes a draft standards document that was released in April, is intended to make Web services easier to deploy and ensure that they comply with laws for securing privileged user information.
Web services allow businesses and business applications to use open technology standards such as XML and SOAP to communicate and share information with each other and with customers over corporate intranets or the Internet.
Phase 2 builds upon standards for sharing user authentication information such as usernames and passwords among organizations and adds guidelines for sharing other user attributes, said Sai Allavarpu, group business manager for network identity services at Sun Microsystems Inc. Sun is a founding member of the Liberty Alliance.
The new standards will make it possible to link user accounts at two or more organizations that exchange information in a Web services transaction and share data such as billing information, credit card numbers and shipping information. That will allow for "mainstream" Web services deployments, something not possible with just the Phase 1 specifications, Allavarpu said.
"Phase 2 bakes privacy into the [Web services] architecture," he said. "When you share data with businesses, you can decide what kinds of conditions and controls you want to place on that data."
Also, the newer specifications introduce features such as a "resource owner interaction service" that will allow users to be contacted on mobile devices such as cellular telephones and confirm requests to share their user information, he said.
For example, a book ordered on Amazon.com Inc.'s Web site might generate a request from FedEx Corp., that's sent to the user's cellular telephone or mobile device, to allow FedEx in order to share the shipping address with Amazon, Allavarpu said.
Those kinds of services may be particularly attractive to telecommunications companies in Europe and the U.S., which are eager to expand the number of premium services they can offer their phone customers but which also must contend with privacy regulations that restrict the sharing of customer information, according to Dan Blum, an analyst at Burton Group.
With a robust identity framework that allows companies to securely exchange useful information about user demographics and preferences, telecommunications companies will find it easier to market and sell new services such as games, restaurant recommendations and applications, Blum said.
Vodafone Group PLC plans to use
Reprinted with permission from
Story copyright 2009 International Data Group. All rights reserved.
Additional Resources


White Papers & Webcasts
Extending COBOL to SOA, Web Services and Beyond
Most businesses have come to realize that recycling or reusing proven processes in combination with newer technologies addresses current and future business needs....
Usability Is Everything
Learn what sets Workday's HR and Payroll solutions apart from the competition....
Extend, Replace, or Convert; which is the best way forward for COBOL Applications?
There are a number of choices when looking at ways to take existing COBOL applications forward. This white paper discusses the most common...
The Value of Real SaaS at Workday
Cost savings, speed to value, and innovation brought to the enterprise by Workday's software-as-a-service solutions for HR and Payroll....
Accelerate SSL Encrypted Applications
The amount of SSL traffic is growing in the enterprise. Because it is encrypted, it cannot be properly controlled and accelerated. Blue Coat...
SaaS at Flextronics, Inc.
Dave Smoley, CIO of Flextronics, discusses the real value of software-as-a-service and why he chose Workday for his HR solution....
ESG Lab Field Audit
Many companies have successfully implemented Riverbed WAN optimization solutions within their Cisco networks. This ESG Lab Field Audit document explores the success that...
Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...
Shape Your Apps Strategy to Reflect New SaaS Licensing and Pricing Trends
Why are smart companies choosing software-as-a-service? Find out in the complimentary Forrester Research report...
Agile Enterprise Content Management (ECM) for Rapid ROI
Find out how combining ECM and BPM will help adress issues about content rich business processes....
Subscribe to Computerworld
